Re: [graylog2] Re: geolocation problem

2016-09-20 Thread Aykisn
Hi, That's not how it works. You need to create an extractor for those messages returning the ip address, and make a field ouf of it. The GeoIp resolver looks for field that are ip addresses, and find the geolocation of those ips, and automatically create a field named "your_ip_field_geolocatio

Re: [graylog2] Re: geolocation problem

2016-09-20 Thread Aykisn
Hi, That's not how it works. You need to create an extrator that will catch the ip address in those messages, and make a field of it. Only then will the GeoIp resolver convert find the geolocation of that ip, and automatcally create a new field named "your_ip_field_geolocation", and you will be

Re: [graylog2] Re: geolocation problem

2016-09-20 Thread Jochen Schalanda
Hi Tony, please answer the questions from my last post: what field do you try to graph on the map widget and what are the contents > of that field? > Ideally, include some example messages. Cheers, Jochen On Tuesday, 20 September 2016 16:46:51 UTC+2, Tony wrote: > > Ho Jochen, > I had tried

Re: [graylog2] Re: geolocation problem

2016-09-20 Thread Tony
Ho Jochen, I had tried all fields with the same error. The file is the classic apache2 access.log file. Thanks Tony 2016-09-19 8:48 GMT+01:00 Jochen Schalanda : > Hi Tony, > > what field do you try to graph on the map widget and what are the contents > of that field? > > Also make sure to read

[graylog2] Re: geolocation problem

2016-09-19 Thread Jochen Schalanda
Hi Tony, what field do you try to graph on the map widget and what are the contents of that field? Also make sure to read http://docs.graylog.org/en/2.1/pages/geolocation.html and the FAQ section at the end. Cheers, Jochen On Saturday, 17 September 2016 14:23:49 UTC+2, Tony wrote: > > Hi All