Geoip database format

Elastic Stack Logstash
1

Is there a way to use updated geoip database in .dat format?
I've used mmdb tools to convert .mmdb ti .csv and updated it with private IP subnets and geolocation according to https://github.com/threatstream/mhn/wiki/Customizing-Maxmind-IP-Geo-DB-for-Internal-Networks
As a result I've got .dat file.
That updated .dat file I've put in logstash filter.
geoip {
source => "clientip"
database => "/usr/share/logstash/mmcity.dat"

After logstash restart, the logstash-plain.log has ERROR: "The database provided is invalid or co
rrupted."

Please guide me to correct topic where I can use my updated mmcity.dat database.

logstash version 6.3

Thanks!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.