I am manually updating the GeoIP databases, but don't have the ability to host the updated DBs on a web server somewhere. Is it possible to utilize a Elasticsearch, Kibana, or Logstash to host the files? For instance, I know this specific filepath wouldn't work (or at least I wouldn't expect it to), sticking the files in Logstash\bin and then referencing it through a URL https://logstash.example.net/overview.json
?
I broke down and setup IIS on the Logstash server. It's really too bad that these databases can't be referenced with a file path.
Geoip can be referenced to the file:
geoip {
source => "clientip"
database => "/opt/downloads/GeoLite2-City.mmdb"
}
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.