Geoip_location is storing data as "lon,lat" not "lat,lon"

ellismendez · August 1, 2017, 9:17am

Hi,
I am testing graylog 2.2.1, and I am trying to create a map visualization of ip data.
I am able to extract all the information fine, but the map was showing the entries in different areas of the world.
The documentation says that the geoip_location coordinates are stored as “lat, lon”, however, if I look at the document, it is storing them backwards “lon, lat”.

geoip_latitude
20
geoip_location
77.0, 20.0
geoip_longitude
77

How could I fix this?
Thanks!

jochen · August 1, 2017, 11:40am

Which version of the Map Widget plugin are you using?

The Map Widget plugin 2.2.1 is storing the coordinates in the correct order:

github.com

Graylog2/graylog-plugin-map-widget/blob/2.2.1/src/main/java/org/graylog/plugins/map/geoip/GeoIpResolverEngine.java#L82


    if (!enabled) {
        return false;
    }


    for (Map.Entry<String, Object> field : message.getFields().entrySet()) {
        final String key = field.getKey();
        if (!key.startsWith(INTERNAL_FIELD_PREFIX)) {
            final Optional<GeoLocationInformation> geoLocationInformation = extractGeoLocationInformation(field.getValue());
            geoLocationInformation.ifPresent(locationInformation -> {
                // We will store the coordinates as a "lat,long" string
                message.addField(key + "_geolocation", locationInformation.latitude() + "," + locationInformation.longitude());
                message.addField(key + "_country_code", locationInformation.countryIsoCode());
                message.addField(key + "_city_name", locationInformation.cityName());
            });
        }
    }


    return false;
}


@VisibleForTesting

Also, geoip_latitude, geoip_longitude, and geoip_location don’t look like they’ve been created by Graylog.
Are you using any other tools to enrich your log messages?

ellismendez · August 4, 2017, 9:47am

Thank you very much Jochen.
It was an error on my side, as I had a log stash geoip plugin running on the input to graylog.
After removing the plugin, everything works well.

Regards.

system · August 18, 2017, 9:47am

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Unable to display world map on geolocation fields Graylog Add-ons	7	5771	October 4, 2017
GeoLocation. Looking for advise? Graylog Central (peer support)	4	739	June 21, 2017
Map widget plugin Graylog Central (peer support)	4	1811	March 1, 2017
Worldmap not working with geopoint field Graylog Central (peer support)	4	846	April 26, 2022
Geolocation / GeoIP confusion on 3.x Graylog Central (peer support)	2	1082	July 1, 2019

Geoip_location is storing data as "lon,lat" not "lat,lon"

Related topics