# Geoip2 ASN resolution in Ingest Pipeline

**URL:** <https://discuss.elastic.co/t/geoip2-asn-resolution-in-ingest-pipeline/356093>\
**Category:** Elasticsearch\
**Tags:** ingest-pipeline\
**Created:** [March 25, 2024, 11:42am UTC](https://discuss.elastic.co/t/geoip2-asn-resolution-in-ingest-pipeline/356093 "2024-03-25T11:42:48Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [March 25, 2024, 2:41pm UTC](https://discuss.elastic.co/t/geoip2-asn-resolution-in-ingest-pipeline/356093/6 "2024-03-25T14:41:48Z")

</div>

Hi @Patryk_Ostrowski

There was another user having issues... see below

What version are you on?

You could set the logs to `TRACE` and see if there's more detail

You can use this

```auto
PUT /_cluster/settings
{
  "persistent": {
    "logger.org.elasticsearch.ingest.geoip": "TRACE"
  }
}

```

You can turn off with

```auto
PUT /_cluster/settings
{
  "persistent": {
    "logger.org.elasticsearch.ingest.geoip": null
  }
}

```

Then Turn off / on the etc

```auto
PUT _cluster/settings
{
  "transient": {
    "ingest.geoip.downloader.enabled": false
  }
}

PUT _cluster/settings
{
  "transient": {
    "ingest.geoip.downloader.enabled": true
  }
}

PUT _cluster/settings
{
  "transient": {
    "ingest.geoip.downloader.eager.download": true
  }
}

```

The downloader temporarily downloads the files to /tmp which needs to be writeable by the elasticsearch user or perhaps it's out of space

This thread goes through some of the things we tried.

If you read up this thread, you'll see some of the things that we tried.

In the end he loaded manually.

> [@Nginx-ingress-controller-access, \_geoip\_database\_unavailable\_GeoLite2-City.mmdb, \_geoip\_database\_unavailable\_GeoLite2-ASN.mmdb](https://discuss.elastic.co/t/nginx-ingress-controller-access-geoip-database-unavailable-geolite2-city-mmdb-geoip-database-unavailable-geolite2-asn-mmdb/353325/30):
>
> The instructions say On self-managed deployments copy the database files to $ES\_CONFIG/ingest-geoip. Assuming a normal installation Directory layout here /etc/elasticsearch/ingest-geoip

---

_[View the full topic](https://discuss.elastic.co/t/geoip2-asn-resolution-in-ingest-pipeline/356093)._