---
title: Configure GeoIP Database Management
description: To configure GeoIP Database Management: Verify that you are using a license that includes the geoip database management feature.For more information,...
url: https://www.elastic.co/elastic/docs-builder/docs/3016/reference/logstash/configuring-geoip-database-management
products:
  - Logstash
applies_to:
  - Elastic Cloud Serverless: Generally available
  - Elastic Stack: Generally available
---

# Configure GeoIP Database Management
To configure [GeoIP Database Management](https://www.elastic.co/elastic/docs-builder/docs/3016/reference/logstash/logstash-geoip-database-management):
1. Verify that you are using a license that includes the geoip database management feature.
   For more information, see [[https://www.elastic.co/subscriptions](https://www.elastic.co/subscriptions)](https://www.elastic.co/subscriptions) and [License management](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3016/deploy-manage/license/manage-your-license-in-self-managed-cluster).
2. Specify [geoip database management settings](#geoip-database-management-settings) in the `logstash.yml` file to tune the configuration as-needed.


## GeoIP database Management settings in Logstash

You can set the following `xpack.geoip` settings in `logstash.yml` to configure the [geoip database manager](https://www.elastic.co/elastic/docs-builder/docs/3016/reference/logstash/logstash-geoip-database-management). For more information about configuring Logstash, see [logstash.yml](https://www.elastic.co/elastic/docs-builder/docs/3016/reference/logstash/logstash-settings-file).
<definitions>
  <definition term="xpack.geoip.downloader.enabled">
    (Boolean) If `true`, Logstash automatically downloads and manages updates for GeoIP2 databases from the `xpack.geoip.downloader.endpoint`. If `false`, Logstash does not manage GeoIP2 databases and plugins that need a GeoIP2 database must be configured to provide their own.
  </definition>
  <definition term="xpack.geoip.downloader.endpoint">
    (String) Endpoint URL used to download updates for GeoIP2 databases. For example, `https://example.com/overview.json`. Defaults to `https://geoip.elastic.co/v1/database`. Note that Logstash will periodically make a GET request to `${xpack.geoip.downloader.endpoint}?elastic_geoip_service_tos=agree`, expecting the list of metadata about databases typically found in `overview.json`.
  </definition>
  <definition term="xpack.geoip.downloader.poll.interval">
    (Time Value) How often Logstash checks for GeoIP2 database updates at the `xpack.geoip.downloader.endpoint`. For example, `6h` to check every six hours. Defaults to `24h` (24 hours).
  </definition>
</definitions>


## Offline and air-gapped environments

If Logstash does not have access to the internet, or if you want to disable the database manager, set the `xpack.geoip.downloader.enabled` value to `false` in `logstash.yml`. When the database manager is disabled, plugins that require GeoIP lookups must be configured with their own source of GeoIP databases.

### Using an HTTP proxy

If you can’t connect directly to the Elastic GeoIP endpoint, consider setting up an HTTP proxy server. You can then specify the proxy with `http_proxy` environment variable.
```sh
export http_proxy="http://PROXY_IP:PROXY_PORT"
```


### Using a custom endpoint

If you work in an air-gapped environment and can’t update your databases from the Elastic endpoint, You can then download databases from MaxMind and bootstrap the service.
1. Download both `GeoLite2-ASN.mmdb` and `GeoLite2-City.mmdb` database files from the [MaxMind site](http://dev.maxmind.com/geoip/geoip2/geolite2).
2. Copy both database files to a single directory.
3. [Download Elasticsearch](https://www.elastic.co/downloads/elasticsearch).
4. From your Elasticsearch directory, run:
   ```sh
   ./bin/elasticsearch-geoip -s my/database/dir
   ```
5. Serve the static database files from your directory. For example, you can use Docker to serve the files from nginx server:
   ```sh
   docker run -p 8080:80 -v my/database/dir:/usr/share/nginx/html:ro nginx
   ```
6. Specify the service’s endpoint URL in Logstash using the `xpack.geoip.download.endpoint=http://localhost:8080/overview.json` setting in `logstash.yml`.

Logstash gets automatic updates from this service.