Where do you configure the GeoIP plugin (not using logstash)

I would like to configure using a different geoip database
or would like to configure the cache_size option (not even sure if that is available)

But how or in which file do I do this? And what are all the options?

I did find documentation for logstash (https://www.elastic.co/guide/en/logstash/current/plugins-
filters-geoip.html#plugins-filters-geoip-common-options)

But I'm not using logstash. I installed the ingest-geoip module with
/opt/elasticsearch/bin/elasticsearch-plugin install ingest-geoip

Don't have one to test with, so take this for what it's worth, but:

The place to put the db is wherever your config file is. if, for example, yours is at /etc/elasticsearch/elasticsearch.yml the db would go in /etc/elasticsearch/ingest-geoip/ (where the default MM dns are)

And from https://www.elastic.co/guide/en/elasticsearch/plugins/current/using-ingest-geoip.html I think the config parameter you're after is:

ingest.geoip.database_file: dbname

But from there on I'm unclear. Hope this gets you at least started along the way.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.