GEO_GET is really the right way forward if you want to future proof your code. Eventually all enrichments will be done via Stellar and dedicated enrichment bolts will go away.
05.10.2017, 15:12, "Nick Allen" <[email protected]>:
+1 to using GEO_GETOn Thu, Oct 5, 2017 at 5:59 PM, Justin Leet <[email protected]> wrote:There is also a Stellar function for doing geo lookups. http://metron.apache.org/current-book/metron- stellar/stellar-common/index. html#GEO_GET It'll return a map of the fields when given an IP. On Thu, Oct 5, 2017 at 5:37 PM, Simon Elliston Ball <[email protected]> wrote:And incase your install didn’t pick up the latest geo database (or you want to update it, the bottom of http://metron.apache.org/current-book/metron-platform/met ron-data-management/index.html gives you the relevant info.
On 5 Oct 2017, at 22:36, Simon Elliston Ball <[email protected]> wrote:http://metron.apache.org/current-book/metron-platform/metron -enrichment/index.html Shows you how to configure geo enrichment.Simon
On 5 Oct 2017, at 22:33, Laurens Vets <[email protected]> wrote:What's the quickest way to enable geo enrichment on a source ip address in 0.4.1-release? Is there a simple document somewhere with instructions?
-------------------
Thank you,
James Sirota
PPMC- Apache Metron (Incubating)
jsirota AT apache DOT org
