Jordan Sissel

Hmm, I'm open to this idea. Skipping lookups on all RFC1918 addresses sounds like an OK default behavior - thoughts? As for having an array, would it be useful to...

@IngaFeick +1 on your proposal :)

> we could add an option called skip_private_ips => false `private` may not be the correct word to use. We could have a setting to skip over address ranges we...

@bufordt13 I have heard of folks makking their own geoip2 data files, but I have no advice for you on how to achieve this. If you want custom lookups from...

@bufordt13 if you want to provide custom data, you are certainly welcome to do so! This filter only supports Maxmind's GeoIP data file formats. Adding other formats is outside of...

No news to report. We will keep this ticket updated with any newsz On Mon, May 1, 2017 at 5:06 PM Allen Chan wrote: > Any progress on this? I...

> I assume skipping the lookup entirely for IPs not in maxmind db would add performance gains. The way you phrased this is a bit confusing. In order to skip...

For this idea, we need to also consider ipv6, not just ipv4.

@robcowart Thank you for your detailed example and response. I agree with you that a good approach to solving this is to use the existing [cidr filter](https://www.elastic.co/guide/en/logstash/current/plugins-filters-cidr.html).

This seems like the wrong filter to do this. GeoIP filter exists to provide a way to get a geographic location for an IP address. Getting a geographic location for...