"ip" => "184.73.175.108", "country_code2" => "US", "country_code3" => "USA", "country_name" => "United States", "continent_code" => "NA", "region_name" => "VA", "city_name" => "Ashburn", "latitude" => 39.0437, "longitude" => -77.4875, "dma_code" => 511, "area_code" => 703, "timezone" => "America/New_York", "real_region_name" => "Virginia", "location" => [ [0] -77.4875, [1] 39.0437 ] } *geoip defaults produce too much bloat enrichment - GEOIP using Logstash resulting document Logstash filter geoip : Maxmind’s GeoLiteCity database
no installation required