Graylog 利用 GeoIP 展示用户地理位置
2019-06-17 本文已影响0人
awker
Graylog 可以利用 GeoIP 解析 IP 地址来定位用户位置,从而使我们在日志中可以展示用户地理位置。
1、下载 GeoLite2 City Database
# cd /etc/graylog/server/
# wget http://geolite.maxmind.com/download/geoip/database/GeoLite2-City.mmdb.gz
# gunzip GeoLite2-City.mmdb.gz
2、启用和配置 Geo-Location Processor
2.1 点击 Update
![](https://img.haomeiwen.com/i12475671/e8ee2306cd8facd2.png)
2.2 启用 Geo-location processor
![](https://img.haomeiwen.com/i12475671/abd58c86a9400695.png)
3、调整 GeoIP Resolver 顺序,把 GeoIP Resolver 放在最后
![](https://img.haomeiwen.com/i12475671/e1518eebd85a7b97.png)
![](https://img.haomeiwen.com/i12475671/46a5a55dfcce419f.png)
![](https://img.haomeiwen.com/i12475671/eb73e62a59bf7ff9.png)
4、从 nginx access log(因为有IP字段) 中查看实现的效果
![](https://img.haomeiwen.com/i12475671/d95da24d055df5c8.png)
![](https://img.haomeiwen.com/i12475671/813c858db8e1da97.png)
![](https://img.haomeiwen.com/i12475671/eb04ca222f19b88d.png)
![](https://img.haomeiwen.com/i12475671/80fd87d98d7a95dc.png)