logstash-filter-phpipam 0.7.3 → 0.7.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f67a76c960e60bbf5528c6fadf0a1b6127ae8512fb538a8e56c11f8449ae60b4
-  data.tar.gz: 1994b36ad823165f395cfcf25074f7964fcac483f3d6ef877832522d95845c33
+  metadata.gz: 8cccaae03423dbd8850ff132ecea6363b7bc8e30ff6bf60235aa5d858c177424
+  data.tar.gz: f200dae24960cacf205fb4ba0d1fcfdef3e0ccc9e6eae12d6a3177ad75c460eb
 SHA512:
-  metadata.gz: 69a9b705746d79ced2ea692a1bd35870b102be28dedf238f827f5062e315768026d1d14946aff13a2b3e0a08625885339e8d40578129327ff8ab00b59a07dc48
-  data.tar.gz: 54ae6ac859d39cd426dd140fb106a62aa5cbcc94e01306ba757cb8f9467e08fa8a4202bde1c781e3c2cddd45343b09446631ad00d8f62b7c92b47b1a8b30cb85
+  metadata.gz: ba0fa5d20b67d58b34f26beb98eccb33e3f3c32ecff03da3d0a5b9034c83262b3a710052fe8001f51019287c78f0f1a4d94bd1382d6f8d94d10d034a5fbb235d
+  data.tar.gz: 1ec14e3a6e9246dd45dbe40167a832a855138adcdbe36cc9f31c567167540ef2771c771596a13512fcf1113915c390e825dd70bae8df555ee07e6ab541061ea2

data/README.md

@@ -4,7 +4,7 @@ A Logstash filter that looks up an IP-address, and returns results from phpIPAM
 ## Installation
 This plugin can be installed using the `logstash-plugin` command in $LOGSTASH_HOME:
 ```bash
-${LOGSTASH_HOME}/bin/logstash-plugin install logstash-filter-phpipam
+${LOGSTASH_HOME:-/usr/share/logstash}/bin/logstash-plugin install logstash-filter-phpipam
 ```
 
 ## Configuration options
@@ -23,6 +23,22 @@ ${LOGSTASH_HOME}/bin/logstash-plugin install logstash-filter-phpipam
 `app_id` can be found in phpIPAM: Administration -> API \
 It's recommended to use SSL when accessing the app_id in phpIPAM.
 
+## Geo-points
+By default the lon and lat are mapped as normal floats, NOT geo-points!
+
+To use the latitude and longtitude in Kibana Maps, you either need to:
+1. Preload mappings yourself
+2. Use preloaded mappings from something like Filebeat (7.0+)
+
+For option 2, if you use the default target of `phpipam`, you can do something like this, after the phpipam filter:
+```
+mutate {
+  copy => {
+    "[phpipam][location][location]" => "[geo][location]"
+  }
+}
+```
+
 ## Example
 This example...
 ```ruby
@@ -71,8 +87,8 @@ phpipam {
       "name"     => "Null Island",
       "id"       => 1,
       "location" => {
-        "lat" => "0.000000",
-        "lon" => "0.000000"
+        "lat" => 0.0,
+        "lon" => 0.0
       },
       "address" => "Null Island, Atlantic Ocean"
     }

data/lib/logstash/filters/phpipam.rb

@@ -50,6 +50,8 @@ class LogStash::Filters::Phpipam < LogStash::Filters::Base
   def filter(event)
     ip = event.get(@source)
 
+    return if ip.nil?
+
     return unless valid_ip?(ip, event)
 
     # Get data from cache or phpIPAM if not in cache
@@ -236,7 +238,7 @@ class LogStash::Filters::Phpipam < LogStash::Filters::Base
       base['location']['address']     = location_data['address'] unless nil_or_empty?(location_data['address'])
       base['location']['name']        = location_data['name'] unless nil_or_empty?(location_data['name'])
       base['location']['description'] = location_data['description'] unless nil_or_empty?(location_data['description'])
-      base['location']['location']    = { 'lat' => location_data['lat'], 'lon' => location_data['long'] } unless nil_or_empty?(location_data['lat'])
+      base['location']['location']    = { 'lat' => location_data['lat'].to_f, 'lon' => location_data['long'].to_f } unless nil_or_empty?(location_data['lat'])
     end
 
     # Cache it for future needs

data/logstash-filter-phpipam.gemspec

@@ -2,7 +2,7 @@
 
 Gem::Specification.new do |s|
   s.name          = 'logstash-filter-phpipam'
-  s.version       = '0.7.3'
+  s.version       = '0.7.4'
   s.licenses      = ['Apache-2.0']
   s.summary       = 'A Logstash filter that returns results from phpIPAM'
   s.description   = 'A Logstash filter that looks up an IP-address, and returns results from phpIPAM'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-filter-phpipam
 version: !ruby/object:Gem::Version
-  version: 0.7.3
+  version: 0.7.4
 platform: ruby
 authors:
 - magnuslarsen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-08-08 00:00:00.000000000 Z
+date: 2019-08-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: logstash-core-plugin-api