# GrayLog3 GeoIP does not work!

**URL:** <https://community.graylog.org/t/graylog3-geoip-does-not-work/15011>\
**Category:** Graylog Central (peer support)\
**Tags:** pipeline-rules\
**Created:** [April 16, 2020, 4:02pm UTC](https://community.graylog.org/t/graylog3-geoip-does-not-work/15011 "2020-04-16T16:02:05Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![polinafrolov](https://avatars.discourse-cdn.com/v4/letter/p/5daacb/32.png) [@polinafrolov](https://community.graylog.org/u/polinafrolov)\
**Post date:** [April 16, 2020, 4:02pm UTC](https://community.graylog.org/t/graylog3-geoip-does-not-work/15011/1 "2020-04-16T16:02:06Z")

</div>

Hi I am new begginer of GrayLog Config  
For now I have some problems with config. GeoIP for Graylog  
I had installed my Graylog 3.2.4 on Ubuntu 18.04, then create one input for Linux Syslog use this configuration on my other VPS server, which I want to control and monitoring with Graylog:  
sudo nano /etc/rsyslog.d/90-graylog.conf  
Add this one line:  
_._ @mydomen.com:4459;RSYSLOG\_SyslogProtocol23Format  
And That’s all I recive all data that I need  
But…  
I want to use Graylog GeoIP, for it I had done next:

1. Download GeoLite2-City.mmdb Database
2. Put it in correct way “/etc/graylog/server/”
3. DB is reading for Graylog
4. Create Table lookup by this manuals:  
[https://www.graylog.org/post/how-to-set-up-graylog-geoip-configuration](https://www.graylog.org/post/how-to-set-up-graylog-geoip-configuration)  
[https://www.graylog.org/post/implementing-geolocation-with-graylog-pipelines](https://www.graylog.org/post/implementing-geolocation-with-graylog-pipelines)  
And many others
5. I create pipeline rule:  
rule “GeoIP lookup: src\_ip”  
when  
has\_field(“gl2\_remote\_ip”)  
then  
let geo = lookup(“geoip”, to\_string($message.gl2\_remote\_ip));  
set\_field(“gl2\_remote\_ip\_geo\_location”, geo[“coordinates”]);  
set\_field(“gl2\_remote\_ip\_geo\_country”, geo[“country”].iso\_code);  
set\_field(“gl2\_remote\_ip\_geo\_city”, geo[“city”].names.en);  
end  
That I can get information about IP I add field “gl2\_remote\_ip”, which contains IP-address, BUT  
My World Map does not work and doesn’t show any information on the map  
In all guides that I read it must be src\_ip or other field, which include IP in my case it is gl2\_remote\_ip  
Plz help me?  
What I must to do?  
I must create pipeline for extract ip from gl2\_remote\_ip and put it in custom field for example “ip\_src”???  
Or What??  
I am stuck (

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [April 23, 2020, 7:28am UTC](https://community.graylog.org/t/graylog3-geoip-does-not-work/15011/2 "2020-04-23T07:28:25Z")

</div>

what is your processing order in `System > Configuration` ? If should be similar to

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/4/4c56004444d1f2b2e5330e9a3f8d6bc35eb45c33.png)

---

<div class="post-metadata">

**Author:** ![shoothub](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/shoothub/32/6412_2.png) [@shoothub](https://community.graylog.org/u/shoothub)\
**Post date:** [April 23, 2020, 2:15pm UTC](https://community.graylog.org/t/graylog3-geoip-does-not-work/15011/3 "2020-04-23T14:15:50Z")

</div>

Check if pipeline rule added fields for GeoIP especially `gl2_remote_ip_geo_location`, which should contains GPS coordinates for map. If yes, create widget and add `gl2_remote_ip_geo_location` and widget type change to Map.

---

<div class="post-metadata">

**Author:** ![polinafrolov](https://avatars.discourse-cdn.com/v4/letter/p/5daacb/32.png) [@polinafrolov](https://community.graylog.org/u/polinafrolov)\
**Post date:** [April 23, 2020, 3:06pm UTC](https://community.graylog.org/t/graylog3-geoip-does-not-work/15011/4 "2020-04-23T15:06:49Z")

</div>

Hi  
Thx for attention  
Yes all is fine and works  
Closed

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 7, 2020, 3:19pm UTC](https://community.graylog.org/t/graylog3-geoip-does-not-work/15011/5 "2020-05-07T15:19:13Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.