# Maxmind mmdb - Logstash geoip

**URL:** <https://discuss.elastic.co/t/maxmind-mmdb-logstash-geoip/27564>\
**Category:** Logstash\
**Created:** [August 18, 2015, 8:21am UTC](https://discuss.elastic.co/t/maxmind-mmdb-logstash-geoip/27564 "2015-08-18T08:21:34Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![gugansankar](https://avatars.discourse-cdn.com/v4/letter/g/e274bd/32.png) [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Post date:** [August 18, 2015, 8:21am UTC](https://discuss.elastic.co/t/maxmind-mmdb-logstash-geoip/27564/1 "2015-08-18T08:21:34Z")

</div>

Hi,

Is it possible to mention mmdb in logstash geoip section and also Does logstash support mmdb as like below configuration ?.

geoip {  
source =\> "clientip"  
target =\> "geoip"  
database =\>"/tmp/geoip.mmdb"  
}

---

<div class="post-metadata">

**Author:** ![gugansankar](https://avatars.discourse-cdn.com/v4/letter/g/e274bd/32.png) [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Post date:** [August 19, 2015, 5:30am UTC](https://discuss.elastic.co/t/maxmind-mmdb-logstash-geoip/27564/2 "2015-08-19T05:30:36Z")

</div>

Any idea ?.

---

<div class="post-metadata">

**Author:** ![Brent\_Payne](https://avatars.discourse-cdn.com/v4/letter/b/7c8e57/32.png) [@Brent\_Payne](https://discuss.elastic.co/u/Brent_Payne)\
**Post date:** [September 1, 2015, 6:12pm UTC](https://discuss.elastic.co/t/maxmind-mmdb-logstash-geoip/27564/3 "2015-09-01T18:12:32Z")

</div>

looks like logstash only supports the legacy free MaxMind databases which are in .dat format. The paid and updated versions are in mmdb format. Doesn't look like there is an easy way to convert from mmdb to dat, but it might be possible. I already have a preprocessing step prior to logstash so I'm moving my maxmind ETL there. If we decide to go with logstash -\> ES. I'll look into creating a new filter and placing it on github.

---

<div class="post-metadata">

**Author:** ![gugansankar](https://avatars.discourse-cdn.com/v4/letter/g/e274bd/32.png) [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Post date:** [September 22, 2015, 8:15am UTC](https://discuss.elastic.co/t/maxmind-mmdb-logstash-geoip/27564/4 "2015-09-22T08:15:33Z")

</div>

@Brent_Payne Thanks for your reply.

Please update the status/share the github url here if you created new filter for this. So that I can make use of it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:28am UTC](https://discuss.elastic.co/t/maxmind-mmdb-logstash-geoip/27564/5 "2017-07-06T05:28:26Z")

</div>