topic Add on which can be used to list the country name from client_ip in All Apps and Add-ons https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34000#M1383 <P>Is there any add-on that can be used with my splunk app which can be able to list the country name from the client_ip ? And, I want to know how to package this add on with my app so that i can be able to use it in my app.</P> Tue, 24 Apr 2012 06:43:00 GMT ranjyotiprakash 2012-04-24T06:43:00Z Add on which can be used to list the country name from client_ip https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34000#M1383 <P>Is there any add-on that can be used with my splunk app which can be able to list the country name from the client_ip ? And, I want to know how to package this add on with my app so that i can be able to use it in my app.</P> Tue, 24 Apr 2012 06:43:00 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34000#M1383 ranjyotiprakash 2012-04-24T06:43:00Z Re: Add on which can be used to list the country name from client_ip https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34001#M1384 <P>Yes, the MAXMIND app provides this functionality: <A href="http://splunk-base.splunk.com/apps/22282/geo-location-lookup-script-powered-by-maxmind">http://splunk-base.splunk.com/apps/22282/geo-location-lookup-script-powered-by-maxmind</A></P> <P>It provides a custom lookup command - require users to install this separate app in order to have geoip lookup work.</P> Tue, 24 Apr 2012 07:01:20 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34001#M1384 Ayn 2012-04-24T07:01:20Z Re: Add on which can be used to list the country name from client_ip https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34002#M1385 <P>thanks for the answer..But, I am not getting the results. It is just showing the logs.<BR /> I am having client_ip field in firewall logs and I am using </P> <P>sourcetype="firewall" |lookup geoip clientip AS client_ip</P> <P>But, I am not getting the correct results.I want to know how to use this to get details with respect to an IP ?</P> Tue, 24 Apr 2012 14:00:17 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34002#M1385 ranjyotiprakash 2012-04-24T14:00:17Z Re: Add on which can be used to list the country name from client_ip https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34003#M1386 <P>When you say you're not getting the correct results. What do you mean? Are you getting results, but not the results you expected? Or are you not getting new fields from the maxmind lookup at all?</P> Tue, 24 Apr 2012 14:58:31 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34003#M1386 Ayn 2012-04-24T14:58:31Z Re: Add on which can be used to list the country name from client_ip https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34004#M1387 <P>Change it to be sourcetype="firewall" | lookup geoip clientip | rename clientip AS client_ip. When you put the 'AS' in there it does not work but you can still rename the field.</P> <P>You should now see the fields under field discovery like client_city, Client_country etc...that you can now use.</P> Mon, 28 Sep 2020 11:42:54 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34004#M1387 sdaniels 2020-09-28T11:42:54Z Re: Add on which can be used to list the country name from client_ip https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34005#M1388 <P>Thanks a lot ...</P> Mon, 30 Apr 2012 13:46:05 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34005#M1388 ranjyotiprakash 2012-04-30T13:46:05Z Re: Add on which can be used to list the country name from client_ip https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34006#M1389 <P>i got the results</P> Mon, 30 Apr 2012 13:46:14 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34006#M1389 ranjyotiprakash 2012-04-30T13:46:14Z Re: Add on which can be used to list the country name from client_ip https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34007#M1390 <P>Thanks ... it worked for me</P> Mon, 30 Apr 2012 13:46:40 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-on-which-can-be-used-to-list-the-country-name-from-client-ip/m-p/34007#M1390 ranjyotiprakash 2012-04-30T13:46:40Z