# GeoIP Lite EOL pipeline filter **URL:** \ **Category:** Elasticsearch\ **Created:** [February 25, 2018, 9:37am UTC](https://discuss.elastic.co/t/geoip-lite-eol-pipeline-filter/121369 "2018-02-25T09:37:56Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![bruno-d](https://avatars.discourse-cdn.com/v4/letter/b/87869e/32.png) [@bruno-d](https://discuss.elastic.co/u/bruno-d)\ **Post date:** [February 25, 2018, 9:37am UTC](https://discuss.elastic.co/t/geoip-lite-eol-pipeline-filter/121369/1 "2018-02-25T09:37:56Z")
Hi it seems Geoip Lite DB is not free anymore for home user and will be not be updated anymore as before. What services do you plan to offer to replace this one ? Does IP2Location LITE is in the road map ? I am using geopip lite in pipeline filter . Thanks to let us know. ---
**Author:** ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)\ **Post date:** [February 25, 2018, 11:11am UTC](https://discuss.elastic.co/t/geoip-lite-eol-pipeline-filter/121369/2 "2018-02-25T11:11:53Z")
You can still use GeoLite2 DBs. The notice from MaxMind is... > We will be discontinuing updates to the GeoLite Legacy databases as of April 1, 2018. You will still be able to download the April 2018 release until January 2, 2019. GeoLite Legacy users will need to update their integrations in order to switch to the free GeoLite2 or commercial GeoIP databases by April 2018. > In addition, in 2019, latitude and longitude coordinates in the GeoLite2 databases will be removed.\* Latitude and longitude coordinates will continue to be provided in GeoIP2 databases. Please check back for updates. Since around v5 Logstash supports the GeoLite2 DBs. ---
**Author:** ![MikeC0](https://avatars.discourse-cdn.com/v4/letter/m/65b543/32.png) [@MikeC0](https://discuss.elastic.co/u/MikeC0)\ **Post date:** [February 25, 2018, 10:32pm UTC](https://discuss.elastic.co/t/geoip-lite-eol-pipeline-filter/121369/3 "2018-02-25T22:32:30Z")
The latitude and longitude in GeoLite2 will be removed in 2019. Can we support IP2Location LITE with more information such as latitude, longitude, ZIP code and time zone soon? The development should be minimal because they have an external filter ready. > **[ip2location/logstash-filter-ip2location](https://github.com/ip2location/logstash-filter-ip2location)** > > logstash-filter-ip2location - IP2Location filter plugin for Logstash enables Logstash's users to add geolocation information such as country, state, city, latitude, longitude, ZIP code, time zo... ---
**Author:** ![bruno-d](https://avatars.discourse-cdn.com/v4/letter/b/87869e/32.png) [@bruno-d](https://discuss.elastic.co/u/bruno-d)\ **Post date:** [February 26, 2018, 9:12am UTC](https://discuss.elastic.co/t/geoip-lite-eol-pipeline-filter/121369/4 "2018-02-26T09:12:42Z")
Hi all, I read that we all agree that geoip is moving away. It seems great some can move also toward with ip2location. But, I am using the pipeline filter and can only used this as i extract the geoIP from parsing syslog message. the GeopIP is then pipeline to fill the geoip struct. 1. can we plan to have IP2location in pipeline mode ? is it already done ? 2. can we plan to have also the information from ip2Proxy ? (i found very usefull the classification VPN, TOR, etc...) Thanks, regards ---
**Author:** ![GaryChewter](https://avatars.discourse-cdn.com/v4/letter/g/b77776/32.png) [@GaryChewter](https://discuss.elastic.co/u/GaryChewter)\ **Post date:** [February 28, 2018, 2:54am UTC](https://discuss.elastic.co/t/geoip-lite-eol-pipeline-filter/121369/5 "2018-02-28T02:54:34Z")
Hi Bruno-d, We have found two good articles about using IP2Location and IP2Proxy filters in Elastic Stack. Please review it and let us know if it is useful. > **[How to use IP2Location filter plugin with Elastic Stack](https://www.ip2location.com/tutorials/how-to-use-ip2location-filter-plugin-with-elastic-stack)** > > This tutorial shows you on how to use IP2Location filter plugin with Elastic Stack (Elasticsearch, Filebeat, Logstash, and Kibana) > **[How to use IP2Proxy filter plugin with Elastic Stack](https://www.ip2location.com/tutorials/how-to-use-ip2proxy-filter-plugin-with-elastic-stack)** > > This tutorial shows you on how to use IP2Proxy filter plugin with Elastic Stack (Elasticsearch, Filebeat, Logstash, and Kibana) Meanwhile, I strongly agree that we should integrate IP2Location LITE into road map this year. ---
**Author:** ![bruno-d](https://avatars.discourse-cdn.com/v4/letter/b/87869e/32.png) [@bruno-d](https://discuss.elastic.co/u/bruno-d)\ **Post date:** [March 4, 2018, 7:07am UTC](https://discuss.elastic.co/t/geoip-lite-eol-pipeline-filter/121369/6 "2018-03-04T07:07:38Z")
Hi thanks to all. It's seems the usecase is with filebeats and it is not clear to me it will be processed through elastisearch with pipeline filter. My conf is pretty full and is Syslog-Logstach-Elastisearch-Kibana on a RPI3. ELK 5.6. I computed the IP to be parsed with querys and painless script to fill a specific variable field every 10 minutes. Querys are CURL in shell execute in Crontab. The reason is IP comes in the middle of syslog message alerts from the f/w of the router. The painless script do string search, extraction and set to a variable. I then pipeline the geoip filter to this variable every 10 minutes to get the GEOIP results. The PI is at the maximum of capacity in terms of memory (700Mega no swap) and averageLoad to 2-2.5. My usage of the geoip pipeline was in a shell as curl -XPOST "[http://localhost:9200/\/syslog/\_update\_by\_query?pipeline=geoip](http://localhost:9200/%3Clogstash-%7Bnow%2Fd%7D%3E/syslog/_update_by_query?pipeline=geoip)" -H 'Content-Type: application/json' -d' { "query": { "range" : { "@timestamp" : { "gte" : "now-14m" } } } }' **So, I am not sure i can manage this usecase with IP2Location.** **I will use in the next weeks a new PI to test the same configuration using IP2location and will come back to you.** Thanks if you have in a meanwhile some tips (like you are pretty sure i will failed 😂 because I am not an ELK expert ) regards ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 1, 2018, 7:07am UTC](https://discuss.elastic.co/t/geoip-lite-eol-pipeline-filter/121369/7 "2018-04-01T07:07:58Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.