I’m using a GELF input to get Apache2 logs into Graylog (after a complete reset). I’m stuck on how to create a geolocation field properly. I believe the correct way is to do this via a pipeline, but I’m pretty sure that I’m doing it incorrectly and I don’t know why. I’ve created the proper lookup…

I while back I wrote up something about creating custom indexes and fixing historical types. It might help a bit since the Graylog docs are spartan: [image] FYE: Custom index mapping - historical correction Graylog Central (peer support) One mans journey on correcting a e…

I am an idiot. There is a simple, but key piece missing from the rule I adapted and that is within the to_string function call. I now have this: [image] The fields are created, AWESOME. But, the actual geolocation field is created as a “string” type and in order for me to use it in Grafana, I …

Ok. So I have solved the issue, but I needed to manually update the base template for these logs. This was tricky LOL. Is there any way to edit the default index template in Graylog directly before the index is created? I used Cerebro because I couldn’t figure out how to do it in Graylog. Holy …

You can create custom graylog-elastic mappings with rudimentary instructions here: [image] Elasticsearch — Graylog 4.0.0 documentation

Excellent! I will give this a shot with my next set of indexes!

Create GeoIP geohash_grid field with Graylog Pipeline

Graylog Central (peer support)

tmacgbay (Tmacgbay) December 29, 2020, 7:02pm 6

I while back I wrote up something about creating custom indexes and fixing historical types. It might help a bit since the Graylog docs are spartan:

Topic		Replies	Views
GeoIP Partially Functional Graylog Central (peer support)	1	566	June 12, 2021
Pipeline Function Request - to_geopoint Graylog Central (peer support)	4	1336	March 10, 2018
Need Assistance with GeoIP and Pipeline Graylog Central (peer support) pipeline-rules , windows	5	125	February 24, 2025
Geolocation (again) problems Graylog Central (peer support)	21	1582	November 14, 2022
GEO IP Not Working Graylog Central (peer support) pipeline-rules	19	7232	April 23, 2020

Create GeoIP geohash_grid field with Graylog Pipeline

Related topics