# Geolocation 0 message error

**URL:** <https://community.graylog.org/t/geolocation-0-message-error/17739>\
**Category:** Graylog Central (peer support)\
**Tags:** pipeline-rules, debuggingpl\
**Created:** [November 4, 2020, 9:08am UTC](https://community.graylog.org/t/geolocation-0-message-error/17739 "2020-11-04T09:08:35Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![denizilhan](https://avatars.discourse-cdn.com/v4/letter/d/a587f6/32.png) [@denizilhan](https://community.graylog.org/u/denizilhan)\
**Post date:** [November 4, 2020, 9:08am UTC](https://community.graylog.org/t/geolocation-0-message-error/17739/1 "2020-11-04T09:08:35Z")

</div>

Hi, we are trying to add geolocation plugin to our working Graylog server and followed guidelines but there is no messages received by pipeline, fields (country, city …) and map is not showing at all.

rule “GeoIP lookup: src\_ip”

when

has\_field(“src\_ip”)

then

let geo = lookup(“geoip”, to\_string($message.src\_ip));

set\_field(“src\_ip\_geo\_location”, geo[“coordinates”]);

set\_field(“src\_ip\_geo\_country”, geo[“country”].iso\_code);

set\_field(“src\_ip\_geo\_city”, geo[“city”].names.en);

end

 ![Graylog Image 2020-11-04 at 12.01.10](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/6/6c692f03fd0b09268128bfa92a023a0f1c78c522.jpeg) ![Graylog Image 2020-11-04 at 12.01.33](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/f/f25f22173654fed900946657dfe73235bb267537.jpeg) ![Graylog Image 2020-11-04 at 12.06.32](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/1/1884bc1375f8aa7d442adc0a9e16dfcc4a7a2383.jpeg) ![Graylog Image 2020-11-04 at 11.59.45](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/5/5def9045ffb0ccdf89243532330029b0cdb8291a.jpeg) ![Graylog Image 2020-11-04 at 12.00.48](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/0/0a3a21a09490c035fd80e62b09274208c2c5edd1.jpeg)

---

<div class="post-metadata">

**Author:** ![shoothub](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/shoothub/32/6412_2.png) [@shoothub](https://community.graylog.org/u/shoothub)\
**Post date:** [November 4, 2020, 2:32pm UTC](https://community.graylog.org/t/geolocation-0-message-error/17739/2 "2020-11-04T14:32:53Z")

</div>

1. First check your lookup table, if it returns correct geoip field if you type some internet IP in Lookup Tables section?
2. I don’t see field `src_ip` in your example message screenshot.
3. Maps requires geoip fields with coordinates to be present by geoip lookup to show world map.
4. Check if you correctly setup your pipeline - assign pipeline rule to right stage (e.g. 0) and setup pipeline connection.
5. Try to debug pipeline rule with debug function, and check logs:  
add line to your pipeline rule:  
`debug(concat("Src_ip: ", to_string($message.src_ip)));`  
And then check graylog log four debug function output:  
`sudo tail -f /var/log/graylog-server/server.log`

---

<div class="post-metadata">

**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\
**Post date:** [November 5, 2020, 4:42am UTC](https://community.graylog.org/t/geolocation-0-message-error/17739/3 "2020-11-05T04:42:25Z")

</div>

@denizilhan  
I was able to get mine to work, by setting my message processor order like this.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/1/150dda0826e5c5a46cadc7d0369c0c4de13b2f4e.png)

And then I set my stage to -1 in my environment.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/b/b339cab0e436a7799df32c621e94e37aa75e7612.png)

It didnt come through right away, i think i waited like15 to 20 minutes. Sorry its been awhile.

![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/3/3213a9037232c2e94fd4a86eda8e8192cd70ef12.png)

Agree with @shoothub you need those field to make it happen.

Hope this helps

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [November 19, 2020, 4:42am UTC](https://community.graylog.org/t/geolocation-0-message-error/17739/4 "2020-11-19T04:42:25Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.