View source country

[santxus]

Hi team

Hi have around 50 users that they are using the OpenVPN service daily. For auditor purpose, we want to see the source country of each user/ip. Do you know any internal, external tool that can provide this information?

Maybe analysing the Syslog messages or via SNMP or dashboard...

Thank you

[NogBadTheBad]

Syslog and feed it into Splunk or Elastic Search.

https://docs.splunk.com/Documentation/Splunk/8.0.5/Viz/IplocationChoropleth

https://www.elastic.co/blog/geoip-in-the-elastic-stack

Never done it, but if I was I'd use one of the two above.