1. Describe your incident: I am setting up a new Graylog server. My use is case is bringing in Nginx Logs and I want to be able to use the geo-locate function on the IPs to determine where most of traffic is coming from and which are the top IPs. But I can’t seem to get the geo-locate to work. The …

I just realised that the Message Processor Order above had stopped my streams getting the messages. So I had to swap 1 and 2. So my current order is: Pipeline Processor Message Filter Chain GeoIP Resolver However I still don’t see any Geo info despite the logs being in the correct streams now.

Are you following instructions from this blog post on how to set up Graylog GeoIP Configuration This uses the pipeline to target fields that you specifically need… or are you following the documentation for scanning all messages that contain IPs and let the GEO-Location processor handle them?

@ adambirds : please post a screenshot of your Geolocation settings (System → Configurations. You can find the Geolocation settings under the Plugins / Geo-Location Processor section).

@adambirds GEO IP Not Working - #8 by shoothub

GeoIP doesn't seem to be working

Graylog Central (peer support)

gsmith (GSmith) July 26, 2022, 12:45am 5

@adambirds

GEO IP Not Working - #8 by shoothub

Topic		Replies	Views
GEO IP Not Working Graylog Central (peer support) pipeline-rules	20	7190	May 7, 2020
GeoIP does not seem to work on V3.3 Graylog Central (peer support)	2	556	June 15, 2020
Graylog GeoIP Configuration Graylog Central (peer support)	16	3454	April 12, 2023
GeoIP Partially Functional Graylog Central (peer support)	2	561	June 26, 2021
Geolocation issues Graylog Central (peer support) pipeline-rules	3	751	September 15, 2021

GeoIP doesn't seem to be working

Related topics