Hi, I was going through the process of setting up the
ip_lookups enrichment. Even though I’ll end up subscribing to maxmind but just for fun I wondered if there was another way to do it using AWS Cloudfront’s
CloudFront-Viewer-Country header that gets forwarded by the edge server. I only need country level detection.
You’d have to put the collector behind CloudFront and make sure to pass all traffic through. It might not be necessary to enable all edge locations. Then I suppose use the HTTP Header enrichment to extract the header.
What do you think?