Hi, In 7.14+ Elasticsearch enabled the GeoIP downloader and made the DB reloadable. But I was wondering how does this actually work. Looking at the docs , it seems like all this process does now is download the DB file, read that DB file into an index, then use an abstracted enrich processor . Is thi…

Hi @BenB196 Generally your understanding is correct, the downloader etc was created to meet the new license requirements for MaxMind GeoLite2 database which requires that the DB is kept up to date. Also it is a separate piece of code than the normal enrich processor but in the broadest sense yes it…

Discuss the Elastic Stack

How does the new (7.14+) GeoIP Processor Work?

Elastic Stack Elasticsearch

stephenb (Stephen Brown) November 23, 2021, 4:47pm 4

Yes I suspect it has as good or better than regular Enrich.

Not as far as I know, but please feel free to file a feature enhancement.

Topic		Replies	Views
ElasticCloud Standard - Elasticsearch GeoIP proccessor: Inaccurae results Elasticsearch	1	354	July 7, 2020
GeoIP processor / setup? Kibana ingest-pipeline	9	3829	March 25, 2022
How to update the geoip with the new? Elasticsearch	17	5263	April 17, 2018
Ingest-geoip for beta1 Elasticsearch	3	663	July 5, 2017
License of GeoLite2 database Elasticsearch license	8	731	April 3, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How does the new (7.14+) GeoIP Processor Work?

Related topics