topic Re: Splunk GeoIP database in All Apps and Add-ons

Splunk GeoIP database

darioapis — Tue, 26 Feb 2019 09:52:03 GMT

I have one simple question. Does Splunk use paid "GeoLite2-City.mmdb" version or free one. The reason is that, if it is not paid then I can upgrade it manually. Thanks.

Re: Splunk GeoIP database

chrisyounger — Tue, 26 Feb 2019 09:54:50 GMT

Hi @darioapis

Its not paid, so you can update it if you like. There are also Splunkbase apps that can do it for you. Like this one: https://splunkbase.splunk.com/app/4183/

All the best

Re: Splunk GeoIP database

_joe — Fri, 13 Nov 2020 16:45:51 GMT

It appears the automatic update portion only works if you have a paid API key.

Re: Splunk GeoIP database

markhill1 — Thu, 25 Mar 2021 01:46:53 GMT

Hi, Actually it works with just the free sign-up, I have been using it that way for a long time now. Unless you are talking about the auto-update app they have for installing on your host machine. I haven't used that before. Thanks.

Re: Splunk GeoIP database

VatsalJagani — Fri, 02 Apr 2021 11:25:05 GMT

This App seems to be really useful - https://splunkbase.splunk.com/app/5482/.

The App auto-updates the MaxMind database without going into the backend every week. It also allows you to run a search command on Splunk search to manually download and update the latest database.