I am parsing firewall logs and I don't want logstash to try and do geo parsing. My firewall logs already have the geo information. How can I disable geo parsing so I stop getting _geoip_lookup_failure?
Logstash will only try to add any geo location information if you added a geoip filter in your logstash configuration.
You need to check your Logstash configuration and remove the geoip filter.