Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document how to enable GeoIP2 ASN/ISP lookups #122

Open
acchen97 opened this issue Jun 28, 2017 · 1 comment
Open

Document how to enable GeoIP2 ASN/ISP lookups #122

acchen97 opened this issue Jun 28, 2017 · 1 comment
Labels

Comments

@acchen97
Copy link

With the recent addition of GeoIP2 ISP and ASN lookup support, we should include documentation on how to enable it esp since its been a hot request. We don't bundle these datasets OOTB, so they'll need to download/license and include it when running Logstash.

/cc @dedemorton @suyograo

@dwasss
Copy link

dwasss commented Sep 11, 2017

something like this for the LS config, filter section?

        # Add more geolocation data / ASN info
        if [SOURCE] {
                geoip {
                        source => "SOURCE"
                        database => "/etc/logstash/GeoLite2-City.mmdb"
                        add_tag => [ "GeoIP" ]
                }
                geoip {
                        source => "SOURCE"
                        database => "/etc/logstash/GeoLite2-ASN.mmdb"
                }
        }

@dedemorton dedemorton removed their assignment Feb 14, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants