The GeoIP Resolver plugin runs after the pipeline processing, so that all geolocation fields have already been normalized.
Other than grabbing the city, country code and IP coordinates, you can also find info such as postal code, time zone, or name of the country in a different language. The amount of information found in the MaxMind database is much larger than the data that the GeoIP Resolver can extract. In fact, these powerful features allow you to do much more than the basic plugin. However, you can further improve your ability to extract meaningful and useful data by leveraging the functionality of pipelines and lookup tables. Geolocation can be automatically built into the Graylog platform by using the "GeoIP Resolver" plugin with a MaxMind database.
0 kommentar(er)
