# Show custom geoip fields

**URL:** <https://discuss.elastic.co/t/show-custom-geoip-fields/279266>\
**Category:** Logstash\
**Created:** [July 21, 2021, 1:02pm UTC](https://discuss.elastic.co/t/show-custom-geoip-fields/279266 "2021-07-21T13:02:57Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Velon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/velon/32/91921_2.png) [@Velon](https://discuss.elastic.co/u/Velon)\
**Post date:** [July 21, 2021, 1:02pm UTC](https://discuss.elastic.co/t/show-custom-geoip-fields/279266/1 "2021-07-21T13:02:57Z")

</div>

I have add custom fields **AcmeCorp.DeptName** and **AcmeCorp.DeptName** whith [maxmind\_mmdb](https://github.com/maxmind/mmdb-from-go-blogpost/), but I can't find it in the last result with logstash geoip plugins, so I'm asking some help ~  
Thanks you~

![image](https://us1.discourse-cdn.com/elastic/original/3X/c/5/c52cb0a06c5b0e29d7fc7b4a545f4f4bd6db07ad.png)

---

<div class="post-metadata">

**Author:** ![angelo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/angelo/32/61325_2.png) [@angelo](https://discuss.elastic.co/u/angelo)\
**Post date:** [July 21, 2021, 4:59pm UTC](https://discuss.elastic.co/t/show-custom-geoip-fields/279266/2 "2021-07-21T16:59:28Z")

</div>

Based on the error message:

> illegal field value AcmeCorp.DeptName. valid values are [AUTONOMOUS\_SYSTEM\_NUMBER, AUTONOMOUS\_SYSTEM\_ORGANIZATION, CITY\_NAME, COUNTRY\_NAME, CONTINENT\_CODE, CONTINENT\_NAME, COUNTRY\_CODE2, COUNTRY\_CODE3, DOMAIN, IP, ISP, POSTAL\_CODE, DMA\_CODE, REGION\_NAME, REGION\_CODE, TIMEZONE, LOCATION, LATITUDE, LONGITUDE, ORGANIZATION]

you are limited to only those fields so you would have to see about reusing one of those fields if that is supported in the blogpost for the mmdb file (ex: organization?).

---

<div class="post-metadata">

**Author:** ![Velon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/velon/32/91921_2.png) [@Velon](https://discuss.elastic.co/u/Velon)\
**Post date:** [July 22, 2021, 1:10am UTC](https://discuss.elastic.co/t/show-custom-geoip-fields/279266/3 "2021-07-22T01:10:08Z")

</div>

Can I open the limit ?? I want to show many fields.  
I don't see any way to replace these fields. 555..

---

<div class="post-metadata">

**Author:** ![angelo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/angelo/32/61325_2.png) [@angelo](https://discuss.elastic.co/u/angelo)\
**Post date:** [July 22, 2021, 8:04pm UTC](https://discuss.elastic.co/t/show-custom-geoip-fields/279266/4 "2021-07-22T20:04:15Z")

</div>

I meant that those are the default and only fields that Logstash will return or accept as fields to return as they are 'hard-coded' into the geoip filter from what it looks like.

---

<div class="post-metadata">

**Author:** ![Velon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/velon/32/91921_2.png) [@Velon](https://discuss.elastic.co/u/Velon)\
**Post date:** [July 24, 2021, 2:19am UTC](https://discuss.elastic.co/t/show-custom-geoip-fields/279266/5 "2021-07-24T02:19:48Z")

</div>

emm.. I see , and thank you~

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 21, 2021, 2:20am UTC](https://discuss.elastic.co/t/show-custom-geoip-fields/279266/6 "2021-08-21T02:20:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.