topic Re: Why has iplocation /all just stopped working - was returning timezone? in Splunk Cloud Platform https://community.splunk.com/t5/Splunk-Cloud-Platform/Why-has-iplocation-all-just-stopped-working-was-returning/m-p/612966#M1769 <P>Ok I fixed it by updating a new version of the&nbsp;GeoLite2-City database - don't appreciate it stop working in an upgrade though! I had a job reliant on that process&nbsp;</P> Tue, 13 Sep 2022 22:27:39 GMT donelliot 2022-09-13T22:27:39Z Why has iplocation /all just stopped working - was returning timezone? https://community.splunk.com/t5/Splunk-Cloud-Platform/Why-has-iplocation-all-just-stopped-working-was-returning/m-p/612937#M1768 <P>I am on splunk cloud and have been using this functionality which is pretty useful to determine what timezone our users are in. It just seems to have stopped since last Tuesday we just got our environment upgraded to Version:8.2.2203.4<BR /><BR />it is returning the fields for timezone and metro but no data&nbsp;</P> <P>Any ideas ? (where x.x.x.x = ip address)<BR /><BR />| makeresults 1<BR />| eval src_ip = "x.x.x.x"<BR />| iplocation src_ip allfields=true<BR />| transpose<BR />gives</P> <TABLE width="170"> <TBODY> <TR> <TD width="75">column</TD> <TD width="95">row 1</TD> </TR> <TR> <TD>City</TD> <TD>Houston</TD> </TR> <TR> <TD>Continent</TD> <TD>North America</TD> </TR> <TR> <TD>Country</TD> <TD>United States</TD> </TR> <TR> <TD>MetroCode</TD> <TD>&nbsp;</TD> </TR> <TR> <TD>Region</TD> <TD>Texas</TD> </TR> <TR> <TD>Timezone</TD> <TD>&nbsp;</TD> </TR> <TR> <TD>_time</TD> <TD>1663100176</TD> </TR> <TR> <TD>lat</TD> <TD>29.7604</TD> </TR> <TR> <TD>lon</TD> <TD>-95.3698</TD> </TR> <TR> <TD>src_ip</TD> <TD>x.x.x.x</TD> </TR> </TBODY> </TABLE> <P><BR /><BR />I've raised a case but interested if anyone else has experienced this</P> Tue, 13 Sep 2022 20:35:37 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Why-has-iplocation-all-just-stopped-working-was-returning/m-p/612937#M1768 donelliot 2022-09-13T20:35:37Z Re: Why has iplocation /all just stopped working - was returning timezone? https://community.splunk.com/t5/Splunk-Cloud-Platform/Why-has-iplocation-all-just-stopped-working-was-returning/m-p/612966#M1769 <P>Ok I fixed it by updating a new version of the&nbsp;GeoLite2-City database - don't appreciate it stop working in an upgrade though! I had a job reliant on that process&nbsp;</P> Tue, 13 Sep 2022 22:27:39 GMT https://community.splunk.com/t5/Splunk-Cloud-Platform/Why-has-iplocation-all-just-stopped-working-was-returning/m-p/612966#M1769 donelliot 2022-09-13T22:27:39Z