topic Re: Are there addons for Splunk geolocating devices? in Splunk Enterprise

Are there addons for Splunk geolocating devices?

jip31 — Thu, 29 Sep 2022 16:06:44 GMT

Hello

I have basic questions about hte way to geolocate devices with Splunk

Is an addon exists?

If not, is it possible to correlate a tool like NetDB with Splunk using DB Connect?

https://web.stanford.edu/group/networking/netdb/help/prod/netdb.html

If yes, what are the prerequesites for doing this?

Thanks

Re: Are there addons for Splunk geolocating devices?

andrew_nelson — Thu, 29 Sep 2022 16:41:04 GMT

For public IP address space, Splunk comes with an | iplocation function with data accurate as of the Splunk package being published.
iplocation - Splunk Documentation

The documentation comes with info on how to update the database.

Re: Are there addons for Splunk geolocating devices?

richgalloway — Thu, 29 Sep 2022 16:51:15 GMT

I don't see an app on splunkbase, but that doesn't mean you can't use the NetDB API to create one.

If there's a JDBC driver for NetDB then you may be able to use DB Connect.

Re: Are there addons for Splunk geolocating devices?

jip31 — Fri, 30 Sep 2022 05:24:32 GMT

OK but it will do no work for me because it's not public adress but internal adress

Re: Are there addons for Splunk geolocating devices?

seth_a_zuykn-io — Mon, 17 Nov 2025 15:38:03 GMT

@jip31 I know this is an older post, but if you don't have the External Public Egress IPs from your UFs or Enterprise, you can use our Get Public IP Add-on to collect them: https://splunkbase.splunk.com/app/8107