SentinelOne integration GeoIP database error

[stephenb (Stephen Brown)]

Perhaps try this...

Disable and reenable the geoip databases

_geoip_database_unavailable_GeoLite2-ASN.mmdb

Sorry but that is not the correct part of the logs... there are many many logs perhaps take the file grep -i geo my-application.log and show those results... I am asking internally... I am seeing some inconsistency in 8.7.0... but oddly not with your version the geo dbs loaded right away... BTW this is what geostats should look like... seeing if there is a command to force reload.. curl 'localhost:9200/_ingest/geoip/stats?pretty' { "stats" : { "successful_downloads" : 3, "failed_d…

Also, is that the complete error?

Where are you seeing that?