How to logstash geoip database file update?

Elastic Stack Logstash
1

Hello, I'm TaeSung Kim.

I'm sorry. I'm not used to English.

Now, I use 5.2.2 ES, logstash, kibana.
I find GeoLite2-City.mmdb file.

/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-filter-geoip-4.0.4-java/vendor/GeoLite2-City.mmdb

I want to update this MaxMind geo database file.
How to update this file?

Thank you!

2

You can download the database yourself from the MaxMind site to a directory in the local machine, and then use the database => filepath option in logstash-filter-geoip like so:

filter
   geoip {
     source => "clientip"
     database => "/opt/downloads/GeoLite2-City.mmdb"
   }
}
3

Thank you very much. :slight_smile: