5537e8b378
The geoip capabilities are built into logstash and can help a deployer better understand the workloads they're running within their environments. This change adds geoip capabilities in line with the recommended practice from elastic. Link: https://www.elastic.co/blog/geoip-in-the-elastic-stack Change-Id: I109879bd9aeeaa0312eb3303e2e7566181ecff91 Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
18 lines
206 B
Django/Jinja
18 lines
206 B
Django/Jinja
input {
|
|
beats {
|
|
port => {{ logstash_beat_input_port }}
|
|
}
|
|
}
|
|
|
|
filter {
|
|
if [source.ip] {
|
|
geoip {
|
|
source => "source.ip"
|
|
}
|
|
} else if [ip] {
|
|
geoip {
|
|
source => "ip"
|
|
}
|
|
}
|
|
}
|