1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
FROM docker.elastic.co/logstash/logstash:8.14.1
USER root
RUN apt update && apt install -y wget
RUN mkdir -p /usr/share/logstash/geoip
RUN chown -R logstash:logstash /usr/share/logstash/geoip
ARG MAXMIND_LICENSE_KEY
# Don't fail if license key isn't set
COPY geoip/GeoIP2-City-Test.mmdb /usr/share/logstash/geoip/GeoLite2-City.mmdb
RUN wget -O GeoLite2-City.mmdb.tar.gz "https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-City&license_key=${MAXMIND_LICENSE_KEY}&suffix=tar.gz" || true
RUN gunzip GeoLite2-City.mmdb.tar.gz || true
RUN tar xvf GeoLite2-City.mmdb.tar || true
RUN mv GeoLite2*/GeoLite2-City.mmdb /usr/share/logstash/geoip || true
USER logstash
RUN logstash-plugin install logstash-input-udp
RUN logstash-plugin install logstash-output-elasticsearch
RUN logstash-plugin install logstash-filter-geoip
|
