# GeoIP : DAT file belongs to logstash but it says permission denied

**URL:** <https://discuss.elastic.co/t/geoip-dat-file-belongs-to-logstash-but-it-says-permission-denied/43881>\
**Category:** Logstash\
**Created:** [March 9, 2016, 9:29am UTC](https://discuss.elastic.co/t/geoip-dat-file-belongs-to-logstash-but-it-says-permission-denied/43881 "2016-03-09T09:29:14Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![teewhey](https://avatars.discourse-cdn.com/v4/letter/t/8797f3/32.png) [@teewhey](https://discuss.elastic.co/u/teewhey)\
**Post date:** [March 9, 2016, 9:29am UTC](https://discuss.elastic.co/t/geoip-dat-file-belongs-to-logstash-but-it-says-permission-denied/43881/1 "2016-03-09T09:29:14Z")

</div>

Got this on the logstash log.

/etc/logstash/GeoLiteCity.dat belongs to the "logstash" user. Any idea why logstash complains about Permission Denied ?

{:timestamp=\>"2016-03-09T09:26:43.710000+0000", :message=\>"Unknown error while looking up GeoIP data", :exception=\>#\<Errno::EACCES: Permission denied - /etc/logstash/GeoLiteCity.dat\>, :field=\>"remote\_addr", :event=\>#\<LogStash::Event:0xd3bca63 @metadata={"path"=\>"/e

# ll /etc/logstash/GeoLiteCity.dat

-rwxrwxrwx 1 logstash logstash 19926112 Mar 3 03:34 /etc/logstash/GeoLiteCity.dat

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:07am UTC](https://discuss.elastic.co/t/geoip-dat-file-belongs-to-logstash-but-it-says-permission-denied/43881/2 "2017-07-06T05:07:48Z")

</div>