Hi, are there any other messages which exclusively contain an IPv4 or IPv6 address in the "message" field?
I'll quote http://docs.graylog.org/en/2.1/pages/geolocation.html#configure-the-message-processor : That’s it, at this point Graylog will start looking for fields *containing > exclusively an IPv4 or IPv6 address*, and extracting their geolocation > into a <field>_geolocation field. > Note: In case you are not sending structured logs to Graylog, you can use > extractors to store the IPs in your messages into their own fields. Check > out the Extractors documentation > <http://docs.graylog.org/en/2.1/pages/extractors.html#extractors> for > more information. Cheers, Jochen On Tuesday, 7 February 2017 12:59:46 UTC+1, CTuser wrote: > > > Hi, > > > I followed > http://docs.graylog.org/en/2.0/pages/geolocation.html#configure-geolocation > in order to apply the Geo-Location feature. > I tested it with nc -w0 <graylog_host> 5555 <<< '8.8.8.8' and it worked. > > > [image: image] > <https://cloud.githubusercontent.com/assets/25608351/22688584/9b66a9b2-ed35-11e6-9a92-4c92010353cd.png> > > I don't see another logs with "message_geolocation" , even though the > database path is configured. > > [image: image] > > <https://cloud.githubusercontent.com/assets/25608351/22688675/f612eaa6-ed35-11e6-9b5b-1fca45d51905.png> > > > > <https://cloud.githubusercontent.com/assets/25608351/22688675/f612eaa6-ed35-11e6-9b5b-1fca45d51905.png> > > In addition, it's also activate in Message Processors Configuration. > > > [image: image] > <https://cloud.githubusercontent.com/assets/25608351/22688707/208d28b4-ed36-11e6-9572-96583bed303e.png> > > Please advise. > > - Graylog Version: 2.1.2 (Running on CentOS 7) > - Elasticsearch Version: Don't know > - MongoDB Version: Don't know > - Operating System: win 10 x64 > - Browser version: FF 51.0.1 > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/8a787c67-004c-4d28-81da-6ada75e0a8c7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
