# IP2Geo update and 403 error

**URL:** <https://forum.opensearch.org/t/ip2geo-update-and-403-error/21615>\
**Category:** OpenSearch\
**Tags:** troubleshoot\
**Created:** [September 24, 2024, 12:49pm UTC](https://forum.opensearch.org/t/ip2geo-update-and-403-error/21615 "2024-09-24T12:49:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![lczerwonka](https://avatars.discourse-cdn.com/v4/letter/l/f17d59/32.png) [@lczerwonka](https://forum.opensearch.org/u/lczerwonka)\
**Post date:** [September 24, 2024, 12:49pm UTC](https://forum.opensearch.org/t/ip2geo-update-and-403-error/21615/1 "2024-09-24T12:49:26Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):  
Opensearch 2.12  
AlmaLinux release 9.3 (Shamrock Pampas Cat)

**Describe the issue** :  
I receive errors: “error”:“ip2geo\_data\_expired”, when tried to download manifest manually - received errors like below:  
wget [https://geoip.maps.opensearch.org/v1/geolite2-country/manifest.json](https://geoip.maps.opensearch.org/v1/geolite2-country/manifest.json)  
–2024-09-24 14:39:22-- [https://geoip.maps.opensearch.org/v1/geolite2-country/manifest.json](https://geoip.maps.opensearch.org/v1/geolite2-country/manifest.json)  
Resolving [geoip.maps.opensearch.org](http://geoip.maps.opensearch.org) ([geoip.maps.opensearch.org](http://geoip.maps.opensearch.org))… 108.138.51.120, 108.138.51.12, 108.138.51.87, …  
Connecting to [geoip.maps.opensearch.org](http://geoip.maps.opensearch.org) ([geoip.maps.opensearch.org](http://geoip.maps.opensearch.org))|108.138.51.120|:443… connected.  
HTTP request sent, awaiting response… 403 Forbidden  
2024-09-24 14:39:22 ERROR 403: Forbidden.

**Configuration** :  
{  
“datasources”: [  
{  
“name”: “geo-datasource”,  
“state”: “AVAILABLE”,  
“endpoint”: “[https://geoip.maps.opensearch.org/v1/geolite2-city/manifest.json](https://geoip.maps.opensearch.org/v1/geolite2-city/manifest.json)”,  
“update\_interval\_in\_days”: 3,  
“next\_update\_at\_in\_epoch\_millis”: 1727435468123,  
“database”: {  
“provider”: “maxmind”,  
“sha256\_hash”: “xdtsVZzxm9X96Kd4Owf58FNSeFol5zVs2hSfFta2Xeg=”,  
“updated\_at\_in\_epoch\_millis”: 1721406613000,  
“valid\_for\_in\_days”: 30,  
“fields”: [  
“country\_iso\_code”,  
“country\_name”,  
“continent\_name”,  
“region\_iso\_code”,  
“region\_name”,  
“city\_name”,  
“time\_zone”,  
“location”  
]  
},  
“update\_stats”: {  
“last\_succeeded\_at\_in\_epoch\_millis”: 1721733234050,  
“last\_processing\_time\_in\_millis”: 164678,  
“last\_failed\_at\_in\_epoch\_millis”: 1727176280887  
}  
}  
]  
}

**Relevant Logs or Screenshots** :

---

<div class="post-metadata">

**Author:** ![Eugene7](https://avatars.discourse-cdn.com/v4/letter/e/bbce88/32.png) [@Eugene7](https://forum.opensearch.org/u/Eugene7)\
**Post date:** [September 24, 2024, 1:44pm UTC](https://forum.opensearch.org/t/ip2geo-update-and-403-error/21615/2 "2024-09-24T13:44:23Z")

</div>

Hi @lczerwonka ,

Please try using this command:

```auto
curl -O https://geoip.maps.opensearch.org/v1/geolite2-country/manifest.json

```

---

<div class="post-metadata">

**Author:** ![lczerwonka](https://avatars.discourse-cdn.com/v4/letter/l/f17d59/32.png) [@lczerwonka](https://forum.opensearch.org/u/lczerwonka)\
**Post date:** [September 24, 2024, 2:08pm UTC](https://forum.opensearch.org/t/ip2geo-update-and-403-error/21615/3 "2024-09-24T14:08:59Z")

</div>

This parameter did the trick, thanks.

But regarding “ip2geo\_data\_expired” - I figured it out… too low heap size was the reason. After increase I was able to update geoIP database.