Logstash Geoip is not working Logstash Geoip is not working elasticsearch elasticsearch

Logstash Geoip is not working


You aren't parsing the message... Either add codec => json to your stdin and send in {"ip":"8.8.8.8"} or use a grok filter to parse your input:

grok { match => ['message', '%{IP:ip}' ] }