Re: [graylog2] Geo-Location Processor only resolves msg source address ?

Hi Edmundo, The hint with the configutation made it, changed it and now it seems to work :)

Re: [graylog2] Geo-Location Processor only resolves msg source address ?

Sure :) Is unchanged i think on my other manual installation with more or less Productiv Traffic it looks same. But here a screenshot from the VM: Am Freitag,

Re: [graylog2] Geo-Location Processor only resolves msg source address ?

It looks like it's running before extractors in your Graylog instance. Could you please share with us your "Message Processors Configuration" in System -> Configurations? Edmundo > On 01 Apr 2016, at 13:36, Micha - wrote: > > Hi Edmundo, > > Thanks for your reply

Re: [graylog2] Geo-Location Processor only resolves msg source address ?

Hi Edmundo, Thanks for your reply - but then i guess should work since i have already an extractor and a field (client_ip) with only the IP Address - but it doesnt.

Re: [graylog2] Geo-Location Processor only resolves msg source address ?

Hi Michael, The Geo-location resolver looks for IPs in all fields that _only_ contain an IP address. That means, you need to extract the IP to it's own field (using an extractor or sending logs with something like GELF), to make the geo-location work. The description text is unfortunately

[graylog2] Geo-Location Processor only resolves msg source address ?

Hi, Maybe I missed something somewhere, but it looks to me like Geo-Location Processor only tries to resolve the sender address of the message, and not any fields like stated in the description "scans all fields of every message for IPv4 addresses" On a graylog-beta-2.0.0-beta.1-1.ova I