Torsten Bøgh Köster's Blog

I blog both #dev and #ops

Logstash: Geoip resolution using a REST api

Logstash comes pre-packaged with a geoip filter plugin and a Maxmind Geolite2 database. But when running Logstash in a container environment, updating the bundled database can be a hazzle. If you need geoip lookups in other systems, a rest service is the perfect fit to deliver consistent geoip data.