Hi, On Friday, 21 October 2016 18:16:19 UTC+2, d3pr3cat3d wrote: > > Or are you saying that I should have a field named “ip_geolocation”? I > dont have one. >
Yes, the map widget obviously only works with geo coordinates in the format "$lat, $long" which the GeoIP resolver will create from fields containing IP address literals (and *only* IP address literals). On Friday, 21 October 2016 18:19:25 UTC+2, d3pr3cat3d wrote: > > Found this in the logs > > 2016-10-17T14:09:17.003-07:00 ERROR [MapDataResource] Map data query failed: > Invalid geo data term for field "asa_dst_ip": 8.8.8.8 (required: <lat>,<lng> > - example: 1.23,3.11) > > Make sure that the GeoIP plugin has been setup correctly and that the GeoIP resolver extracts the geo coordinates into the correct fields (e. g. "asa_dst_ip_geolocation" in your case). See http://docs.graylog.org/en/2.1/pages/geolocation.html for details. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/7a50a735-cdf6-419e-8ee1-81f4a89a167c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
