# Creating GeoIP dashboard

**URL:** <https://community.graylog.org/t/creating-geoip-dashboard/32292>\
**Category:** Graylog Central (peer support)\
**Created:** [May 3, 2024, 4:44am UTC](https://community.graylog.org/t/creating-geoip-dashboard/32292 "2024-05-03T04:44:50Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![wilsonshow](https://avatars.discourse-cdn.com/v4/letter/w/df705f/32.png) [@wilsonshow](https://community.graylog.org/u/wilsonshow)\
**Post date:** [May 3, 2024, 4:44am UTC](https://community.graylog.org/t/creating-geoip-dashboard/32292/1 "2024-05-03T04:44:50Z")

</div>

I am trying to create a dashboard for GeoIP. But not sure how dose it works. I have follow the documentation with this following website :

> **[How to Set Up Graylog GeoIP Configuration](https://graylog.org/post/how-to-set-up-graylog-geoip-configuration/)**
>
> Having additional data on logs that contain IP addresses that gives you their Geolocation helps in your investigations and understanding of your traffic patterns. Here's a guide to set up Graylog and enrich your data with this info.

I would like to know how can it read by getting the location information. Currently I am using a private network from my ISP. So will it be possible for it to locate my location?

Base on the pipeline

`rule "GeoIP lookup: src_ip" when has_field("src_ip") then let geo = lookup("geoip", to_string($message.src_ip)); set_field("src_ip_geo_location", geo["coordinates"]); set_field("src_ip_geo_country", geo["country"].iso_code); set_field("src_ip_geo_city", geo["city"].names.en); end`

Should I change it to lookup to take the IP from `gl2_remote_ip`?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 17, 2024, 4:45am UTC](https://community.graylog.org/t/creating-geoip-dashboard/32292/2 "2024-05-17T04:45:25Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
