You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
You can also use custom city, country, and ASN `.mmdb` files. These files must
412
-
be uncompressed. The type (city, country, or ASN) will be pulled from the file
413
-
metadata, so the filename does not matter.
414
-
415
-
. On {ess} deployments upload database using
416
-
a {cloud}/ec-custom-bundles.html[custom bundle].
417
-
418
-
. On self-managed deployments copy the database files to `$ES_CONFIG/ingest-geoip`.
419
-
420
-
. In your `geoip` processors, configure the `database_file` parameter to use a
421
-
custom database file.
422
-
423
-
[[ingest-geoip-settings]]
424
-
===== Node Settings
425
-
426
-
The `geoip` processor supports the following setting:
427
-
428
-
`ingest.geoip.cache_size`::
429
-
430
-
The maximum number of results that should be cached. Defaults to `1000`.
431
-
432
-
Note that these settings are node settings and apply to all `geoip` and `ip_location` processors, i.e. there is a single cache for all such processors.
433
-
434
-
[[geoip-cluster-settings]]
435
-
===== Cluster settings
436
-
437
-
[[ingest-geoip-downloader-enabled]]
438
-
`ingest.geoip.downloader.enabled`::
439
-
(<<dynamic-cluster-setting,Dynamic>>, Boolean)
440
-
If `true`, {es} automatically downloads and manages updates for IP geolocation databases
441
-
from the `ingest.geoip.downloader.endpoint`. If `false`, {es} does not download
442
-
updates and deletes all downloaded databases. Defaults to `true`.
443
-
444
-
[[ingest-geoip-downloader-eager-download]]
445
-
`ingest.geoip.downloader.eager.download`::
446
-
(<<dynamic-cluster-setting,Dynamic>>, Boolean)
447
-
If `true`, {es} downloads IP geolocation databases immediately, regardless of whether a
448
-
pipeline exists with a geoip processor. If `false`, {es} only begins downloading
449
-
the databases if a pipeline with a geoip processor exists or is added. Defaults
450
-
to `false`.
451
-
452
-
[[ingest-geoip-downloader-endpoint]]
453
-
`ingest.geoip.downloader.endpoint`::
454
-
(<<static-cluster-setting,Static>>, string)
455
-
Endpoint URL used to download updates for IP geolocation databases. For example, `https://myDomain.com/overview.json`.
456
-
Defaults to `https://geoip.elastic.co/v1/database`. {es} stores downloaded database files in
457
-
each node's <<es-tmpdir,temporary directory>> at `$ES_TMPDIR/geoip-databases/<node_id>`.
458
-
Note that {es} will make a GET request to `${ingest.geoip.downloader.endpoint}?elastic_geoip_service_tos=agree`,
459
-
expecting the list of metadata about databases typically found in `overview.json`.
460
-
461
-
The downloader uses the JDK's builtin cacerts. If you're using a custom endpoint, add the custom https endpoint cacert(s) to the JDK's truststore.
0 commit comments