@robcowart Thanks for the alert. It’s true that a company to survive need money and they need to pay back all the money of investors and stocks. (Just joking)
The issue of License Changing in MaxMind Database that is behind the plugin required them to change, mainly because them don’t want to release the “reload code” implemented in XPack.
The reloading of new Database is also an issue in Elasticsearch implementation of the plugin.
The geoip is good as fast start, but if you need more accurate IP resolutions you need to pay for better IP databases or Implement your own solution.
I’m using logstash, but many other alternatives are taking momentum such as FluentD and https://vector.dev/ that is written in Rust. These solutions have much better engine that Logstash written in JRuby with a core rewritten partially in Java.
FluentD is the more mature and feature rich (Here a comparation with Logstash https://logz.io/blog/fluentd-logstash/)