update for utf-8 geoip fix

update for utf-8 geoip fix

Author: bitsofinfo

logstash-modsecurity.conf

@@ -388,6 +388,12 @@ filter {
     source => "XForwardedFor"
     target => "XForwardedFor-GEOIP"
   }
+  
+  # Optional, if not fixed: massage values to UTF-8... hack  @see https://logstash.jira.com/browse/LOGSTASH-1372
+  # convert Strings to UTF-8, leave as-is otherwise
+  #ruby {
+  #  code => "geoip = event.to_hash['XForwardedFor-GEOIP']; if !geoip.nil?;  newgeoip = Hash.new(); geoip.each do |key,value|;  if !value.nil? and value.is_a? String; newgeoip[key] = value.encode('UTF-8'); else; newgeoip[key] = value; end; end;  event.to_hash.merge!('XForwardedFor-GEOIP' => newgeoip); end;"
+  #}
 
 
   #~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~