Support for other maxmind sources

Elastic Stack Logstash
1

The logstash docs says other commercial versions of the plugin are supported.

Im using the GeoIP2-Domain plugin, but I get these errors when I run logstash.

[LogStash::Runner] runner - An unexpected error occurred! {:error=>java.lang.IllegalStateException: java.lang.IllegalStateException: Unsupported database type GeoIP2-Domain, :backtrace=>["org.logstash.execution.WorkerLoop.run(org/logstash/execution/WorkerLoop.java:85)", "java.lang.reflect.Method.invoke(java/lang/reflect/Method.java:498)", "org.jruby.javasupport.JavaMethod.invokeDirectWithExceptionHandling(org/jruby/javasupport/JavaMethod.java:440)", "org.jruby.javasupport.JavaMethod.invokeDirect(org/jruby/javasupport/JavaMethod.java:304)", "usr.share.logstash.logstash_minus_core.lib.logstash.java_pipeline.start_workers(/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:235)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:286)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:270)", "java.lang.Thread.run(java/lang/Thread.java:748)"]} [ERROR] 2019-05-06 11:04:46.258 [LogStash::Runner] Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

Logstash Filter

geoip {
            source => "[destination][ip]"
            target => "[destination][domain]"
            database => "/usr/share/logstash/data/GeoIP2-Domain.mmdb"
        }

Does logstash indeed support other commercial DBs from Maxmind?

Thanks in advance.

2

Seems its hardcoded.

I might be out of luck here or have to use the translate filter with the csv version..

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.