Geoip filter
This plugin is used to enrich the log information. Given the IP address, it adds the geographical location of the IP address. It finds the geographical information by performing a lookup against the GeoLite2 City database for valid IP addresses and populates fields with results. GeoLite2 City database is a product of the Maxmind organization and is available under the CCA-ShareAlike 4.0 license. Logstash comes bundled with GeoLite2 City database, so when performing a lookup it need not perform any network call; hence the lookup is fast.
The only required parameter for this plugin is the source, which accepts an IP address in string format. This plugin creates a geoip field with geographical details such as country, postal code, ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access