Logstash Filter - GeoIP2-ISP

[rsmoorthy (Moorthy Rs)]

Hello,

Does the logstash-filter-geoip support GeoIP2-ISP database (commercial database from Maxmind)?

Their documentation at https://github.com/logstash-plugins/logstash-filter-geoip/blob/master/docs/index.asciidoc suggests that GeoIP2-ISP is supported, but the code at https://github.com/logstash-plugins/logstash-filter-geoip/blob/master/lib/logstash/filters/geoip.rb does not seem to support.

Can this be confirmed that GeoIP2-ISP database is supported by logstash-filter-geoip plugin?

Are there any other geoip plugins available, that supports other commercial geoip database, that has ISP info as well?

Thanks
Moorthy

[MikeC0 (Michael)]

We are currently using IP2Location Filter for Logstash. It has ISP information.

https://www.ip2location.com/tutorials/how-to-use-ip2location-filter-plugin-with-ELK

https://github.com/ip2location/logstash-filter-ip2location