# Geo IP Location Mapping issue in Logstash Filter

**URL:** <https://discuss.elastic.co/t/geo-ip-location-mapping-issue-in-logstash-filter/297168>\
**Category:** Logstash\
**Tags:** docker\
**Created:** [February 14, 2022, 4:31pm UTC](https://discuss.elastic.co/t/geo-ip-location-mapping-issue-in-logstash-filter/297168 "2022-02-14T16:31:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jancodenew](https://avatars.discourse-cdn.com/v4/letter/j/87869e/32.png) [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Post date:** [February 14, 2022, 4:31pm UTC](https://discuss.elastic.co/t/geo-ip-location-mapping-issue-in-logstash-filter/297168/1 "2022-02-14T16:31:55Z")

</div>

I am using geoIP logstash filter for getting the geo location details using IPs in logstash.

For manually updating the maxmind geolite2 databse, we have downloaded the database files(GeoLite2-City.mmdb and GeoLite2-ASN.mmdb) from [http://dev.maxmind.com/geoip/geoip2/geolite2](http://dev.maxmind.com/geoip/geoip2/geolite2) and copied in a folder named "ipdatabase" in one of the Elasticsearch node and succesfullty executed the below command  
./bin/Elasticsearch-geoip -s /home/oprroot/ipdatabase

Logstash is in different node. So can someone please tell me which ip and port to use in below configuratioin settings.  
xpack.geoip.download.endpoint=http://localhost:8080/overview.json setting in logstash.yml.

One more doubt related to this is about below mentione command is sending an error. Please let me know whats wrong here.  
curl --insecure -u user:pass [https://IP:9200/\_nodes/stats/geoip\_download\_manager?pretty](https://IP:9200/_nodes/stats/geoip_download_manager?pretty)  
{  
"error" : {  
"root\_cause" : [  
{  
"type" : "illegal\_argument\_exception",  
"reason" : "request [/\_nodes/stats/geoip\_download\_manager] contains unrecognized metric: [geoip\_download\_manager]"  
}  
],  
"type" : "illegal\_argument\_exception",  
"reason" : "request [/\_nodes/stats/geoip\_download\_manager] contains unrecognized metric: [geoip\_download\_manager]"  
},  
"status" : 400  
}

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![jancodenew](https://avatars.discourse-cdn.com/v4/letter/j/87869e/32.png) [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Post date:** [February 15, 2022, 5:22am UTC](https://discuss.elastic.co/t/geo-ip-location-mapping-issue-in-logstash-filter/297168/2 "2022-02-15T05:22:00Z")

</div>

Wiating for a reply.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 15, 2022, 5:22am UTC](https://discuss.elastic.co/t/geo-ip-location-mapping-issue-in-logstash-filter/297168/3 "2022-03-15T05:22:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.