Hello I’m new to the greylog.
my question is can I see GeoIP location of our internal network such us user sign in geoip locatoin etc?
I’m using greylog V4
i have followed this article How to Set Up Graylog GeoIP Configuration | Graylog
and still I can’t see any GeoIp masseges
what I’m Missing here guys any who can help pls.
Hello,
If your addresses falls under one of these probably not.
List of private address
10.0.0.0/8 IP addresses: 10.0.0.0 – 10.255.255.255
172.16.0.0/12 IP addresses: 172.16.0.0 – 172.31.255.255
192.168.0.0/16 IP addresses: 192.168.0.0 – 192.168.255.255
You could see your External IP address.
@gsmith thanks bro for the replay
So you mean we can only see goeIP location when users are accessing our sourcing outside my city and country but not when they are in my network?
Correct. Your internal addresses are (likely) a non routable subnet as shown by @gsmith… so they would not have entries in the GEOIP table. If you wanted to, you could build your own tables with coordinates for your internal addresses… Not sure that is the most efficient way to go about it… but it IS possible…
Yes, just as @tmacgbay explained it.
@tmacgbay If this is internal, chance are ( hoping) @Laale have a DNS server you can get the static IP Address 
and create that lookup table, I was think something on the line of
"ipaddress","somename"
"192.168.1.100","greg"
"192.168.1.101","batman"
"192.168.1.111","grant"
"10.10.10.13","robin"
"10.10.10.14","bruno"This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.