1. Describe your incident:
I’ve configured the GeoIp resolver as documented here using MaxMind’s cities and ASNs databases.
Graylog doesn’t create the expected geolocation fields.
2. Describe your environment:
-
OS Information: Alpine Linux 3.20, Docker 26.1.3
-
Package Version: Graylog Enterprise 6, Graylog Datanode 6, running on docker-compose
-
Service logs, configurations, and environment variables:
3. What steps have you already taken to try and solve the problem?
- Configured the settings as in the screenshot.
- Copied the 2 database files in the right folder
- Set fields src-ip and dst-ip in index as IP type
- Checked docker logs
4. How can the community help?
Provide steps to troubleshoot the problem.