Graylog GeoIP Configuration

[gsmith]

Hello @tijaabo

Just chimming in.

@tijaabo

has_field(“src_ip”)

By chance do you have this field ( src_ip) generated already? if not, it might be you issue.
EDIT: Here is a good post on this subject

Pipeline for creating a GeoIP dashboard

Hello to all, I would like to create a worldmap dashboard to visualize where the user connections come from on our stormshield firewall I followed this procedure : How to Set Up Graylog GeoIP Configuration | Graylog But I’m not really comfortable with pipelines despite the documentation I have trouble to understand and make it work Here is the technical problem: [image] I would like to extract the ip address from the src=x.x.x.x message field to put it in a new field to create my dashboard…

EDIT:2 Sorry for the edits, The one thing I do not see in this post is the Geo-Location Processor which is located → System/Configurations the path configured in my environment, may not be the same in yours but does need to be configured && enabled.