Does Logstash need to be restarted for the updates to GeoIP data to take effect, or will the plugin notice the changes and automatically reopen the file(s)?
A restart of Logstash here takes a few seconds -- we are worried about losing data from some of the real-time data-sources while the server restarts...