-
Notifications
You must be signed in to change notification settings - Fork 140
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[FEATURE]Add geoip
function to PPL for IP address geolocation
#3038
Comments
Am in the process of implementing this |
Hi @YANG-DB , What was the intended method of leveraging the geospatial plugin? Following the example of the inclusion of the job-scheduler and ml-commons plugin, I have been trying to import it directly into the project but noticed that the published geospatial plugin on maven has no jar. As such it does not seem possible to directly import the plugin. Is this assumption correct? If so then, my current plan is to call the endpoint that the geospatial plugin exposes in OpenSearch documented here and communicate with it using the OpenSearchRestClient. Would this be a good path forward? or am I missing something that would make it possible to expose the geospatial plugin? Thanks! |
iplocation
function to PPL for IP address geolocationgeoip
function to PPL for IP address geolocation
Hi, @YANG-DB High-level idea:
Proposed code changes:GeoSpatial:
SQL module:
|
we don't even have a way to do basic Ip address lookups, why are you guys working on the next level before even having a basic way to query ip field type?? |
Hi @kedbirhan, thanks for the feedback and indeed that make sense. For now we are only proposing the high-level changes required for the functionality but not yet reach to the implementation phase. I believe by the time we have the design gathered for this ticket, #3145 should already be wrapped to have the IP type support. Thanks, |
@andy-k-improving |
@YANG-DB see below for the RFC on Geo spatial side. |
Description:
We propose adding an
geoip
function to OpenSearch's Piped Processing Language (PPL) and SQL to provide built-in IP address geolocation capabilities.This feature would be similar to functionality used in OpenSearch's geospatial feature, enhancing PPL's ability to enrich log data with geographical information based on IP addresses.
Proposed Functionality:
Example Usage:
... | eval geolocation = geoip(ip_field)
This would add a new field 'geolocation' with all available location information for the IP address in 'ip_field'.
This would add new fields with specific geolocation information.
This would add a new field 'location_info' with multiple pieces of geolocation data.
Additional considerations
geospatial
opensearch plugin for the ip to geo resolvingRelated resources
The text was updated successfully, but these errors were encountered: