Geo-Location Processor and multiple IPs inf field

[gsmith]

@darrinh

I had thought if you configure the geoip plugin, you didn’t need a pipeline?

You do, Please take a look at the documentation.

How to Set Up Graylog GeoIP Configuration

ALSO this post will help you.

Graylog 4.0.5 - GeoIP does not work

@Tomcat7 Hello, Just chiming in, I have successfully start and configured GeoIP from this documention below. I’m not sure if you followed those instruction but I noticed you had some different configurations. Your pipeline rule “GeoIP lookup: remote_addr” when has_field (“remote_addr”) then let geo = lookup (“geoip”, to_string ($ message.remote_addr)); set_field (“remote_addr_geo_location”, geo [“coordinates”]); set_field (“remote_addr_geo_country”, geo [“country”…

EDIT: This is a good read also

Geolocation via Pipelines in Graylog