Logstash Geoip is not working
You aren't parsing the message... Either add codec => json
to your stdin
and send in {"ip":"8.8.8.8"}
or use a grok
filter to parse your input:
grok { match => ['message', '%{IP:ip}' ] }
You aren't parsing the message... Either add codec => json
to your stdin
and send in {"ip":"8.8.8.8"}
or use a grok
filter to parse your input:
grok { match => ['message', '%{IP:ip}' ] }