GeoIP Lookup
Enriche TenXObjects by geo-referencing ipAddress values via GeoIP DB lookup.
Database files reload on disk changes and can sync from GitHub.
Resolves IP addresses to: Continent, Country, Subdivision, City, Postal, Latitude, Longitude.
Configuration
To configure the GeoIP lookup module, Edit these settings.
Below is the default configuration from: geoIP/config.yaml.
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
# 🔟❎ 'run' GeoIP lookup configuration
# The GeoIP lookup geo-references TenXObjects based on their ipAddress field value.
# To learn more see https://doc.log10x.com/api/js/#TenXObject+ipAddress
# Set the 10x pipeline to 'run'
tenx: run
# =============================== Dependencies ================================
include: run/modules/initialize/geoIP
# =============================== GeoIP Options ===============================
geoIP:
# 'file' specifies the MaxMind GeoIP DB (.mmdb) file to load.
# To learn more see https://doc.log10x.com/api/js/#TenXLookup.loadGeoIPDB
file: data/run/lookup/geo.mmdb
# 'countryField' specifies the field name for country geo-reference data.
# Defaults to "country". Set to "" to disable country enrichment.
countryField: country
# Uncomment the following fields to enable additional geo-reference data as needed:
# continentField: continent
# subdivisionField: subdivision
# cityField: city
# postalField: postal
# latitudeField: latitude
# longitudeField: longitude
Options
Specify the options below to configure the GeoIP lookup:
| Name | Description |
|---|---|
| geoIPFile | MaxMind GeoIP file (.mmdb) |
| geoIPContinentField | Field name for continent geo-reference |
| geoIPCountryField | Field name for country geo-reference |
| geoIPSubdivisionField | Field name for subdivision geo-reference |
| geoIPCityField | Field name for city geo-reference |
| geoIPPostalField | Field name for postal code geo-reference |
| geoIPLatitudeField | Field name for latitude geo-reference |
| geoIPLongitudeField | Field name for longitude geo-reference |
geoIPFile
MaxMind GeoIP file (.mmdb).
| Type | Required |
|---|---|
| File | ✔ |
The MaxMind GeoIP DB file (.mmdb) to load. To learn more, see loadGeoIPDB.
geoIPContinentField
Field name for continent geo-reference.
| Type | Default |
|---|---|
| String | continent |
Specifies the field name to store the continent geo-reference data (e.g., "my_continent"). Defaults to "continent". Set to "" to disable continent enrichment.
geoIPCountryField
Field name for country geo-reference.
| Type | Default |
|---|---|
| String | country |
Specifies the field name to store the country geo-reference data (e.g., "my_country"). Defaults to "country". Set to "" to disable country enrichment.
geoIPSubdivisionField
Field name for subdivision geo-reference.
| Type | Default |
|---|---|
| String | subdivision |
Specifies the field name to store the subdivision (state/region) geo-reference data (e.g., "my_region"). Defaults to "subdivision". Set to "" to disable subdivision enrichment.
geoIPCityField
Field name for city geo-reference.
| Type | Default |
|---|---|
| String | city |
Specifies the field name to store the city geo-reference data (e.g., "my_city"). Defaults to "city". Set to "" to disable city enrichment.
geoIPPostalField
Field name for postal code geo-reference.
| Type | Default |
|---|---|
| String | postal |
Specifies the field name to store the postal code geo-reference data (e.g., "my_postal"). Defaults to "postal". Set to "" to disable postal code enrichment.
geoIPLatitudeField
Field name for latitude geo-reference.
| Type | Default |
|---|---|
| String | latitude |
Specifies the field name to store the latitude geo-reference data (e.g., "my_latitude"). Defaults to "latitude". Set to "" to disable latitude enrichment.
geoIPLongitudeField
Field name for longitude geo-reference.
| Type | Default |
|---|---|
| String | longitude |
Specifies the field name to store the longitude geo-reference data (e.g., "my_longitude"). Defaults to "longitude". Set to "" to disable longitude enrichment.
This module is defined in geoIP/module.yaml.