Maxmind GeoIP2 and GeoLite2

Overview

The ElastiFlow Unified Collector can attempt to determine attributes associated with the autonomous system and geo-location to which a public IP address belongs.

Obtaining the Databases

To use the Maxmind databases for GeoIP and ASN enrichment you will need to download the databases. Due to changes in privacy law in California, Maxmind no longer makes its GeoLite2 databases available for download without registering on their website. Once you have registered and downloaded the database, you can make them available to the ElastiFlow Unified Collector for enrichment of public IP addresses.

Signup at: https://www.maxmind.com/en/geolite2/signup