elastic/logstash

Find city/country/region code from geopoint

Open

#4,313 opened on Dec 7, 2015

View on GitHub
 (1 comment) (0 reactions) (0 assignees)Ruby (14,197 stars) (3,496 forks)batch import
help wantednew plugin

Description

Hello. Does anybody know if i can find all these information starting from a geopoint field ? city country region

I know that logstash can find several information like these using an IP and maxmind, but i presently do not have access to IP address, only a geopoint: latitude and longitude.

Thanks

Contributor guide

Tech stack
ruby
Domain
data
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Logstash basicsgeospatial data handling
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
20
Research direction
First, check the Logstash documentation and existing filter plugins for any that can reverse geocode from latitude/longitude to city/country/region. If none exist, consider writing a custom filter plugin that queries a geocoding API (e.g., OpenStreetMap Nominatim) or uses a local database. Look at the structure of existing filter plugins in the repository, such as the geoip filter (lib/logstash/filters/geoip.rb) for reference. The issue has no assignee or PR, so it is available for implementation.