Open joshuar opened 9 years ago
If the results are sent through Logstash instead of directly to Elasticsearch then the GeoIP lookup can be done there.
Hey @elvarb,
Yep that's definitely one solution. I'd also like to have the option of doing it in pingbeat, either by using/hijacking this functionality that already exists in libbeat, or doing it directly within pingbeat itself. So you could choose whether you wanted to do this enrichment or not in pingbeat or anyway else in your pipeline, if it supports it, like Logstash.
Would be nice to enrich each ping result with geoip data of the target.