Got this on the logstash log.
/etc/logstash/GeoLiteCity.dat belongs to the "logstash" user. Any idea why logstash complains about Permission Denied ?
{:timestamp=>"2016-03-09T09:26:43.710000+0000", :message=>"Unknown error while looking up GeoIP data", :exception=>#<Errno::EACCES: Permission denied - /etc/logstash/GeoLiteCity.dat>, :field=>"remote_addr", :event=>#<LogStash::Event:0xd3bca63 @metadata={"path"=>"/e
ll /etc/logstash/GeoLiteCity.dat
-rwxrwxrwx 1 logstash logstash 19926112 Mar 3 03:34 /etc/logstash/GeoLiteCity.dat