I recently open a thread on the demand to move from GeoIP to IP2location (see GeoIP Lite EOL pipeline filter) and i am now trying. How ever, i failed in my uses cases. I use the GeoIp pipeline filter to fill the GeoIP values from an IP address extracted from syslog-events. I just realised that a logstash-plugin exists but no elastisearch-plugin. Hence a pipeline filter has no sense right ? It means that GeoIP pipeline filter was working but IP2location will not.
It should be a small task to create a similar ip2location plugin for elastisearch based on the GeoIP plugin right ? How do you see the task to do it ?
`sudo ./elasticsearch-plugin install elastisearch-filter-ip2location ERROR: Unknown plugin elastisearch-filter-ip2location `