logstash-filter-geoip 7.2.3-java → 7.2.4-java
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 0ee4080f597ead66a5f575fe76fd7f6c814fbe6318b434eb386f55bb1daf44b5
|
|
4
|
+
data.tar.gz: 113040d2bf666c804aca079dcf196b95df26f0bddc6a891c6e1edd944c86b509
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: cd3b11418095b4530b562cab2514c998614b89ea7962d9fb54bb66e8dd2022043208e77478c2abb4951679037b3a57b3539f6e3a9e3c6b59a409f7515a137f10
|
|
7
|
+
data.tar.gz: ced208c5aba6a1c8177b2429bf22cbd366bce7a5093b046a043de3de1982a6aa624e2c315a8ec12c98f28224e9305f1d5d6458737378bebedd639cf05e8655b6
|
data/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,7 @@
|
|
|
1
|
+
## 7.2.4
|
|
2
|
+
- Fix: update to Gradle 7 [#191](https://github.com/logstash-plugins/logstash-filter-geoip/pull/191)
|
|
3
|
+
- [DOC] Clarify CC licensed database indefinite use condition and air-gapped environment [#192](https://github.com/logstash-plugins/logstash-filter-geoip/pull/192)
|
|
4
|
+
|
|
1
5
|
## 7.2.3
|
|
2
6
|
- [DOC] Add documentation for bootstrapping air-gapped environment for database auto-update [#189](https://github.com/logstash-plugins/logstash-filter-geoip/pull/189)
|
|
3
7
|
|
data/docs/index.asciidoc
CHANGED
|
@@ -59,13 +59,15 @@ database by default.
|
|
|
59
59
|
==== Database Auto-update
|
|
60
60
|
|
|
61
61
|
This plugin bundles Creative Commons (CC) license databases.
|
|
62
|
-
In air-gapped environments, Logstash can use CC license databases indefinitely.
|
|
63
62
|
Logstash checks for database updates every day. It downloads the latest and can replace the old database
|
|
64
63
|
while the plugin is running.
|
|
65
64
|
After Logstash downloads EULA license databases, it will not fallback to CC license databases.
|
|
66
65
|
|
|
67
|
-
If
|
|
68
|
-
|
|
66
|
+
NOTE: If the database has never been updated successfully, as in air-gapped environments, Logstash can use CC license databases indefinitely.
|
|
67
|
+
|
|
68
|
+
After Logstash has switched to a EULA licensed database, the geoip filter will
|
|
69
|
+
stop enriching events in order to maintain compliance if Logstash fails to
|
|
70
|
+
check for database updates for 30 days.
|
|
69
71
|
Events will be tagged with `_geoip_expired_database` tag to facilitate the handling of this situation.
|
|
70
72
|
|
|
71
73
|
TIP: When possible, allow Logstash to access the internet to download databases so that they are always up-to-date.
|
|
@@ -79,13 +81,10 @@ If you can't connect directly to the Elastic GeoIP endpoint, consider setting up
|
|
|
79
81
|
a secure proxy. You can then specify the proxy endpoint URL in the
|
|
80
82
|
`xpack.geoip.download.endpoint` setting in `logstash.yml` file.
|
|
81
83
|
|
|
82
|
-
**Use a custom endpoint**
|
|
84
|
+
**Use a custom endpoint (air-gapped environments)**
|
|
83
85
|
|
|
84
86
|
If you work in air-gapped environment and can't update your databases from the Elastic endpoint,
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
You can create a service that mimics the Elastic GeoIP endpoint. You can then
|
|
88
|
-
get automatic updates from this service.
|
|
87
|
+
You can then download databases from MaxMind and bootstrap the service.
|
|
89
88
|
|
|
90
89
|
. Download your `.mmdb` database files from the
|
|
91
90
|
http://dev.maxmind.com/geoip/geoip2/geolite2[MaxMind site].
|
|
@@ -112,6 +111,7 @@ docker run -p 8080:80 -v my/database/dir:/usr/share/nginx/html:ro nginx
|
|
|
112
111
|
. Specify the service's endpoint URL using the
|
|
113
112
|
`xpack.geoip.download.endpoint=http://localhost:8080/overview.json` setting in `logstash.yml`.
|
|
114
113
|
|
|
114
|
+
Logstash gets automatic updates from this service.
|
|
115
115
|
|
|
116
116
|
[id="plugins-{type}s-{plugin}-metrics"]
|
|
117
117
|
==== Database Metrics
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
Gem::Specification.new do |s|
|
|
2
2
|
|
|
3
3
|
s.name = 'logstash-filter-geoip'
|
|
4
|
-
s.version = '7.2.
|
|
4
|
+
s.version = '7.2.4'
|
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
|
6
6
|
s.summary = "Adds geographical information about an IP address"
|
|
7
7
|
s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
|
|
Binary file
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: logstash-filter-geoip
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 7.2.
|
|
4
|
+
version: 7.2.4
|
|
5
5
|
platform: java
|
|
6
6
|
authors:
|
|
7
7
|
- Elastic
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2021-
|
|
11
|
+
date: 2021-10-29 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
requirement: !ruby/object:Gem::Requirement
|