# GeoIP Procesor

**URL:** <https://discuss.elastic.co/t/geoip-procesor/378624>\
**Category:** Elasticsearch\
**Created:** [May 28, 2025, 4:59am UTC](https://discuss.elastic.co/t/geoip-procesor/378624 "2025-05-28T04:59:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Priyanka\_chauhan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priyanka_chauhan/32/86146_2.png) [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\
**Post date:** [May 28, 2025, 4:59am UTC](https://discuss.elastic.co/t/geoip-procesor/378624/1 "2025-05-28T04:59:05Z")

</div>

Hi All,  
I dont have direct internet on my elk cluster , But I want to use geoip processor through ingest pipeline using elastic agent . But in logs it is showing there is no database available. I have downloaded the maxmind database and transfer in data ingest node of cluster in path :/usr/share/elasticsearch/ingest-geoip/  
. How can I resolve it either using proxy or offline ?

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [May 28, 2025, 8:55am UTC](https://discuss.elastic.co/t/geoip-procesor/378624/2 "2025-05-28T08:55:02Z")

</div>

Hello @Priyanka_chauhan

I believe to use offline DB

```auto
PUT /_cluster/settings
{
  "persistent": {
    "ingest.geoip.downloader.enabled": false
  }
}

```

I see your .mmdb file is already in the correct location

```auto
PUT _ingest/pipeline/geoip-info
{
  "description": "Add geoip info",
  "processors": [
    {
      "geoip": {
        "field": "client.ip",
        "target_field": "client.geo",
        "database_file": "GeoLite2-City.mmdb",
        "ignore_missing": true
      }
    }
  ]
}

```

Thanks!!

---

<div class="post-metadata">

**Author:** ![RainTown](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raintown/32/140206_2.png) [@RainTown](https://discuss.elastic.co/u/RainTown)\
**Post date:** [May 28, 2025, 11:58am UTC](https://discuss.elastic.co/t/geoip-procesor/378624/3 "2025-05-28T11:58:37Z")

</div>

@Priyanka_chauhan be reminded that the maxmind databases are dynamic, you likely want to refresh them according to your chosen schedule appropriate for your use case.

@Tortoise or others maybe know if you need do anything each time a database\_file change (due to external factor) happens, or if elasticsearch will just notice automatically.