Geoip Lookup Service Capability

By activating this service, you can perform analyses in all logs with geo location information.

To enable the service, go to Settings > Enrichment > Geo IP, tick the GeoIP Lookup checkbox and click Save. The option is disabled by default.

33.png

When the service is active, IP address fields in newly received logs are enriched automatically. Country and city information is added for public (external) IP addresses; for example, the Source.Country and Source.City columns are filled for the source IP. No location information is produced for private (internal) IP addresses.

34.png

35.png

Was this article helpful?
1 out of 1 found this helpful

Articles in this section

Become a Certified Logsign User/Administrator
Sign-up for Logsign Academy and take the courses to learn about Logsign USO Platform in detail. Enjoy the courses, and get your badges and certificates. In these courses, you'll learn how to use Logsign in your work and add value to your career.
Visit Our Blog
Our Logsign USO Platform illustrate our expertise. So do the blog. Through our blog posts, deepen your knowledge on various SecOps topics or get updated about important news & modern approaches for cybersecurity. Get into the habit of reading valuable information provided by Logsign. Be a step ahead.