Hi all,
Just had a quick question regarding using a custom (paid for) Maxmind GeoIP database, rather than the bundled one in Logstash.
My question is if Logstash reads against the database each time the plugin is called in a Logstash filter, or if the database is opened/read into memory at the point Logstash starts up?
I'm trying to determine if having the file simply update on disk is sufficient to see changes represented i Logstash, or if the Logstash daemon would need restarting after the database file has been updated?
Cheers,
Mike