add ASN numbers to logstash output

2014-11-18 10:40:29 +00:00 · 2014-11-18 10:40:29 +00:00 · 53ba93acd0
parent 428c27d3c3
commit 53ba93acd0
1 changed files with 6 additions and 0 deletions
--- a/utils/logstash-kippo.conf
+++ b/utils/logstash-kippo.conf
@ -31,6 +31,12 @@ filter {
                add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}" ]
                add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}"  ]
            }
+
+            geoip {
+                source => "src_ip"
+                database => "/opt/logstash/vendor/geoip/GeoIPASNum.dat"
+            }
+
            mutate {
                convert => [ "[geoip][coordinates]", "float" ]
            }