# Use GeoIP2 database with geoip filter plugin

**URL:** <https://discuss.elastic.co/t/use-geoip2-database-with-geoip-filter-plugin/77826>\
**Category:** Logstash\
**Created:** [March 8, 2017, 2:02pm UTC](https://discuss.elastic.co/t/use-geoip2-database-with-geoip-filter-plugin/77826 "2017-03-08T14:02:47Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![jcannell](https://avatars.discourse-cdn.com/v4/letter/j/aca169/32.png) [@jcannell](https://discuss.elastic.co/u/jcannell)\
**Post date:** [March 8, 2017, 2:02pm UTC](https://discuss.elastic.co/t/use-geoip2-database-with-geoip-filter-plugin/77826/1 "2017-03-08T14:02:47Z")

</div>

Hello,

We are thinking of purchasing a license for Maxmind's GeoIP2 database. I've learned that Logstash uses the free Geolite2 database from Maxmind that might be less accurate. Would it be possible to configure logstash to use the paid version of the database, in any way? I wasn't really sure if it was hitting a local file that might be able to be replaced, or how that really worked in the background.

I appreciate any help. Thank you!

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 8, 2017, 7:45pm UTC](https://discuss.elastic.co/t/use-geoip2-database-with-geoip-filter-plugin/77826/2 "2017-03-08T19:45:31Z")

</div>

Yes, look at the path setting in the filter 🙂

---

<div class="post-metadata">

**Author:** ![jcannell](https://avatars.discourse-cdn.com/v4/letter/j/aca169/32.png) [@jcannell](https://discuss.elastic.co/u/jcannell)\
**Post date:** [March 8, 2017, 8:01pm UTC](https://discuss.elastic.co/t/use-geoip2-database-with-geoip-filter-plugin/77826/3 "2017-03-08T20:01:13Z")

</div>

Hi warkolm,

Thank you for your response.

I don't see a path setting on the filter page:  
[https://www.elastic.co/guide/en/logstash/current/plugins-filters-geoip.html](https://www.elastic.co/guide/en/logstash/current/plugins-filters-geoip.html)

is this what you were referring to?

---

<div class="post-metadata">

**Author:** ![jcannell](https://avatars.discourse-cdn.com/v4/letter/j/aca169/32.png) [@jcannell](https://discuss.elastic.co/u/jcannell)\
**Post date:** [March 8, 2017, 8:03pm UTC](https://discuss.elastic.co/t/use-geoip2-database-with-geoip-filter-plugin/77826/4 "2017-03-08T20:03:58Z")

</div>

Nevermind, I think you're referring to the database setting.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 8, 2017, 9:27pm UTC](https://discuss.elastic.co/t/use-geoip2-database-with-geoip-filter-plugin/77826/5 "2017-03-08T21:27:54Z")

</div>

Ahh yes, sorry that is the correct one!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 5, 2017, 9:28pm UTC](https://discuss.elastic.co/t/use-geoip2-database-with-geoip-filter-plugin/77826/6 "2017-04-05T21:28:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.