elasticsearch/pipelines/maillog-with-geoip.json

41 lines
580 B
JSON

{
"processors": [
{
"pipeline" : {
"name": "maillog"
}
},
{
"pipeline" : {
"name": "amavis"
}
},
{
"pipeline" : {
"name": "mailboxlog"
}
},
{
"pipeline" : {
"name": "zimbralog"
}
},
{
"pipeline" : {
"name": "fail2ban"
}
},
{
"geoip" : {
"field" : "mail.remote_ip",
"ignore_missing" : true
}
},
{
"geoip" : {
"field" : "f2b.remote_ip",
"ignore_missing" : true
}
}
]
}