GeoIP i don't see this red sign either

[er213 (erddll)]

i’ve been researching for a few days, but I haven’t been able to progress. there are no new fields or red signs. what should I do ? @gsmith @ihe

[ihe]

you should get in logs with public ip-adresses - then you will have a geomap.

[er213 (erddll)]

this is the real problem. I can’t find how to do @ihe @gsmith

[gsmith]

@er213

Perhaps tell us some of the devices that are sending logs to this graylog? Firewall, router, etc…

[er213 (erddll)]

how can I transfer a public ip address to logs ? @gsmith @ihe

[gsmith]

@er213

Hello, Like I stated above.

@gsmith

You don’t add it, you need to get it by sending it in the log files and extracting it through means. This would depend on what logs your sending.