Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describe your incident: I would like to implement https://www.graylog.org/post/how-to-…

Check out your System/Configurations/Message Processors Configuration, you want the have the Message Filter Chain before the Pipeline Processor - that’s usually why rules aren’t working. I would also consider cleaning up the timestamp issue that is showing up as the gl2-processing-error because tha…

hey @Filisimus Adding on to @tmacgbay suggestion. Lookup Table Returning Null Value

Hey @gsmith and @tmacgbay thanks for your replies. I thought about it and from my understanding the “src_ip” field got to be already there without splitting the key_value pairs because in the pipeline I can choose the streams to use and when configuring the rules for the streams I have the field “…

Hi guys, turns out I’m stupid and had the wrong Stream selected… I’m very sorry for this. So this works… kinda now: rule "GeoIP lookup" when true then set_field("test_geo_src_ip",$message.src_ip); set_field("test_geo_dest_ip",$message.dest_ip); let geo = lookup("geoip", to_string($message.src_…

Nevermind, it works now. Probably I was too impatient when I set the “Geo IP Resolver” Processor at the bottom before and didnt get immediately any results. Thanks all! Fili

Thanks for posting the code for future searchers! Glad it worked out!! :slight_smile:

Need help with GeoIP setup please

Graylog Central (peer support)

gsmith (GSmith) January 26, 2023, 11:46pm 3

hey @Filisimus

Adding on to @tmacgbay suggestion.

Lookup Table Returning Null Value

Topic		Replies	Views
Geolocation issues Graylog Central (peer support) pipeline-rules	2	753	September 1, 2021
GeoIP Setup - Need help Graylog Add-ons	13	452	January 26, 2024
Pipeline extract IPV4 address from message log Graylog Central (peer support) pipeline-rules , debuggingpl	4	2024	July 25, 2021
GeoIP on custom fields Graylog Central (peer support)	9	3713	February 1, 2019
GEO IP Not Working Graylog Central (peer support) pipeline-rules	19	7219	April 23, 2020

Need help with GeoIP setup please

Related topics