Skip to content

Commit 23d06e6

Browse files
Doc: Provide accurate post-geoip lookup example (#18092)
Co-authored-by: Kaise Cheng <[email protected]>
1 parent 5fb5634 commit 23d06e6

File tree

1 file changed

+14
-5
lines changed

1 file changed

+14
-5
lines changed

docs/reference/lookup-enrichment.md

Lines changed: 14 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -65,17 +65,26 @@ $$$geoip-def$$$geoip filter
6565
filter {
6666
geoip {
6767
source => "clientip"
68+
target => "[source]"
6869
}
6970
}
7071
```
7172

7273
After the geoip filter is applied, the event will be enriched with geoip fields. For example:
7374

74-
```json
75-
filter {
76-
geoip {
77-
source => "clientip"
78-
}
75+
```json
76+
"source" => {
77+
"geo" => {
78+
"country_name" => "France",
79+
"country_iso_code" => "FR",
80+
"continent_code" => "EU",
81+
"location" => {
82+
"lon" => 2.3387,
83+
"lat" => 48.8582
84+
},
85+
"timezone" => "Europe/Paris"
86+
},
87+
"ip" => "82.67.74.30"
7988
}
8089
```
8190

0 commit comments

Comments
 (0)