Updated on 2024-11-29 GMT+08:00

Usage Description of ingest-geoip

By default, the Elasticsearch ingest-geoip module uses the Geolite2 City, GeoLite2 Country, and GeoLite2 ASN geoip2 databases of Maxmind to convert IPv4 or IPv6 addresses to geographical location information. The preceding databases are released as the Elasticsearch installation package. As a result, the installation package contains the public IP address, and there is no security risk.