# Auto update GeoLite DB **URL:** \ **Category:** Elasticsearch\ **Created:** [June 5, 2026, 9:48am UTC](https://discuss.elastic.co/t/auto-update-geolite-db/386728 "2026-06-05T09:48:49Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![CD9820](https://avatars.discourse-cdn.com/v4/letter/c/e9c0ed/32.png) [@CD9820](https://discuss.elastic.co/u/CD9820)\ **Post date:** [June 5, 2026, 9:48am UTC](https://discuss.elastic.co/t/auto-update-geolite-db/386728/1 "2026-06-05T09:48:49Z")
Hello Logstash logs following warnings/errors related to GeoLite: failed to fetch ASN database {:exception=\>"503 Service Unavailable"} failed to fetch City database {:exception=\>"503 Service Unavailable"} The managed MaxMind GeoIP ASN database hasn't been synchronized in 43 days and will be removed in order to remain compliant with the MaxMind EULA. Logstash is unable to get newer version from internet. Please check the network settings and allow Logstash accesses the internet to download the latest database. Alternatively you can switch to a self-managed GeoIP database service (`xpack.geoip.download.endpoint`), or configure each plugin with a self-managed database which you can download from [GeoLite Databases and Web Services | MaxMind Developer Portal](https://dev.maxmind.com/geoip/geoip2/geolite2/) I found information concerning this: [Geoip filter plugin | Logstash Plugins](https://www.elastic.co/docs/reference/logstash/plugins/plugins-filters-geoip#plugins-filters-geoip-database_auto) What I did not find in the article is which url's need to be whitelisted for Logstash servers so the automatic download succeeds. Does anyone has more information? Best regards Christophe ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [June 5, 2026, 12:37pm UTC](https://discuss.elastic.co/t/auto-update-geolite-db/386728/2 "2026-06-05T12:37:54Z")
> [@CD9820](#): > > failed to fetch ASN database {:exception=\>"503 Service Unavailable"} > > failed to fetch City database {:exception=\>"503 Service Unavailable"} 503 would be issues with the Elastic endpoint providing the geoip downloads, unless you have anything between logstash and the internet, do you have any proxy or something else between logstash and the internet? > [@CD9820](#): > > What I did not find in the article is which url's need to be whitelisted for Logstash servers so the automatic download succeeds. Does anyone has more information? It is `geoip.elastic.co`, it is mentioned in this [documention](https://www.elastic.co/docs/reference/logstash/configuring-geoip-database-management), but for some reason the plugin documentation does not reference it. > Defaults to `https://geoip.elastic.co/v1/database` ---
**Author:** ![Keith\_Massey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/keith_massey/32/83666_2.png) [@Keith\_Massey](https://discuss.elastic.co/u/Keith_Massey)\ **Post date:** [June 22, 2026, 1:49pm UTC](https://discuss.elastic.co/t/auto-update-geolite-db/386728/3 "2026-06-22T13:49:28Z")
There was a change fairly recently that might be causing this. See [Upcoming geoip.elastic.co storage backend migration](https://discuss.elastic.co/t/upcoming-geoip-elastic-co-storage-backend-migration/385901) . The [documentation](https://www.elastic.co/docs/reference/enrich-processor/geoip-processor#use-proxy-geoip-endpoint) has been updated to reflect that.