Configuring GEOIP Enrichment Source¶

Adding GEOIP Enrichment Source¶

1. Go to Settings >> Configuration >> Enrichment Sources from the navigation bar.

2. Click ADD.

Adding an Enrichment Source¶

3. Select GeoIp.

Adding GEOIP as an Enrichment Source¶

4. Enter a Name.

5. In IP Field Name, enter the field which contains the IP Address.

6. Click Save.

Adding Enrichment Policy¶

In the example below, you can see GEOIP used as an Enrichment Source. If a log contains the field source_ip_address, Logpoint enriches the log with the geographical data of source_ip_address.

GEOIP Enrichment Policy¶