When we create an index then we apply geoip{ }....But how does it find all the information regarding those ips? Like country name, continent name etc??
Both Logstash GeoIp filter and Ingest Node GeoIp processor use the GeoLite2 database provided by MaxMind . We update them on a fairly regular schedule, but you can also swap in newer versions or the commercial offerings if you like.
1 Like
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.