logstash-filter-geoip 7.2.3-java → 7.2.4-java
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 0ee4080f597ead66a5f575fe76fd7f6c814fbe6318b434eb386f55bb1daf44b5
|
4
|
+
data.tar.gz: 113040d2bf666c804aca079dcf196b95df26f0bddc6a891c6e1edd944c86b509
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: cd3b11418095b4530b562cab2514c998614b89ea7962d9fb54bb66e8dd2022043208e77478c2abb4951679037b3a57b3539f6e3a9e3c6b59a409f7515a137f10
|
7
|
+
data.tar.gz: ced208c5aba6a1c8177b2429bf22cbd366bce7a5093b046a043de3de1982a6aa624e2c315a8ec12c98f28224e9305f1d5d6458737378bebedd639cf05e8655b6
|
data/CHANGELOG.md
CHANGED
@@ -1,3 +1,7 @@
|
|
1
|
+
## 7.2.4
|
2
|
+
- Fix: update to Gradle 7 [#191](https://github.com/logstash-plugins/logstash-filter-geoip/pull/191)
|
3
|
+
- [DOC] Clarify CC licensed database indefinite use condition and air-gapped environment [#192](https://github.com/logstash-plugins/logstash-filter-geoip/pull/192)
|
4
|
+
|
1
5
|
## 7.2.3
|
2
6
|
- [DOC] Add documentation for bootstrapping air-gapped environment for database auto-update [#189](https://github.com/logstash-plugins/logstash-filter-geoip/pull/189)
|
3
7
|
|
data/docs/index.asciidoc
CHANGED
@@ -59,13 +59,15 @@ database by default.
|
|
59
59
|
==== Database Auto-update
|
60
60
|
|
61
61
|
This plugin bundles Creative Commons (CC) license databases.
|
62
|
-
In air-gapped environments, Logstash can use CC license databases indefinitely.
|
63
62
|
Logstash checks for database updates every day. It downloads the latest and can replace the old database
|
64
63
|
while the plugin is running.
|
65
64
|
After Logstash downloads EULA license databases, it will not fallback to CC license databases.
|
66
65
|
|
67
|
-
If
|
68
|
-
|
66
|
+
NOTE: If the database has never been updated successfully, as in air-gapped environments, Logstash can use CC license databases indefinitely.
|
67
|
+
|
68
|
+
After Logstash has switched to a EULA licensed database, the geoip filter will
|
69
|
+
stop enriching events in order to maintain compliance if Logstash fails to
|
70
|
+
check for database updates for 30 days.
|
69
71
|
Events will be tagged with `_geoip_expired_database` tag to facilitate the handling of this situation.
|
70
72
|
|
71
73
|
TIP: When possible, allow Logstash to access the internet to download databases so that they are always up-to-date.
|
@@ -79,13 +81,10 @@ If you can't connect directly to the Elastic GeoIP endpoint, consider setting up
|
|
79
81
|
a secure proxy. You can then specify the proxy endpoint URL in the
|
80
82
|
`xpack.geoip.download.endpoint` setting in `logstash.yml` file.
|
81
83
|
|
82
|
-
**Use a custom endpoint**
|
84
|
+
**Use a custom endpoint (air-gapped environments)**
|
83
85
|
|
84
86
|
If you work in air-gapped environment and can't update your databases from the Elastic endpoint,
|
85
|
-
|
86
|
-
|
87
|
-
You can create a service that mimics the Elastic GeoIP endpoint. You can then
|
88
|
-
get automatic updates from this service.
|
87
|
+
You can then download databases from MaxMind and bootstrap the service.
|
89
88
|
|
90
89
|
. Download your `.mmdb` database files from the
|
91
90
|
http://dev.maxmind.com/geoip/geoip2/geolite2[MaxMind site].
|
@@ -112,6 +111,7 @@ docker run -p 8080:80 -v my/database/dir:/usr/share/nginx/html:ro nginx
|
|
112
111
|
. Specify the service's endpoint URL using the
|
113
112
|
`xpack.geoip.download.endpoint=http://localhost:8080/overview.json` setting in `logstash.yml`.
|
114
113
|
|
114
|
+
Logstash gets automatic updates from this service.
|
115
115
|
|
116
116
|
[id="plugins-{type}s-{plugin}-metrics"]
|
117
117
|
==== Database Metrics
|
@@ -1,7 +1,7 @@
|
|
1
1
|
Gem::Specification.new do |s|
|
2
2
|
|
3
3
|
s.name = 'logstash-filter-geoip'
|
4
|
-
s.version = '7.2.
|
4
|
+
s.version = '7.2.4'
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
6
6
|
s.summary = "Adds geographical information about an IP address"
|
7
7
|
s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
|
Binary file
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: logstash-filter-geoip
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 7.2.
|
4
|
+
version: 7.2.4
|
5
5
|
platform: java
|
6
6
|
authors:
|
7
7
|
- Elastic
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2021-
|
11
|
+
date: 2021-10-29 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
requirement: !ruby/object:Gem::Requirement
|