https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-automatically-run-iplocation-on-a-client-ip/m-p/314700#M58926 <P>You would have to first convert/port the existing <CODE>iplocation.py</CODE> command into a <CODE>scripted lookup</CODE> and then make that an <CODE>automatic lookup</CODE>. Start here:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.5.2/Knowledge/Configureexternallookups">http://docs.splunk.com/Documentation/Splunk/6.5.2/Knowledge/Configureexternallookups</A></P> Thu, 23 Feb 2017 14:57:56 GMT woodcock 2017-02-23T14:57:56Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-automatically-run-iplocation-on-a-client-ip/m-p/314699#M58925 <P>I want to run <CODE>iplocation client_ip</CODE> for a given sourcetype automatically. For example if i run <BR /> I dont want to run the command iplocation.</P> <P>I would like to automatically look it up for this sourcetype.</P> <P><CODE><BR /> index= sourcetype=authentication-logs <BR /> | iplocation client_ip<BR /> </CODE></P> <P>Does anyone know how I can achieve this?</P> Wed, 22 Feb 2017 17:48:31 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-automatically-run-iplocation-on-a-client-ip/m-p/314699#M58925 theeansible 2017-02-22T17:48:31Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-automatically-run-iplocation-on-a-client-ip/m-p/314700#M58926 <P>You would have to first convert/port the existing <CODE>iplocation.py</CODE> command into a <CODE>scripted lookup</CODE> and then make that an <CODE>automatic lookup</CODE>. Start here:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.5.2/Knowledge/Configureexternallookups">http://docs.splunk.com/Documentation/Splunk/6.5.2/Knowledge/Configureexternallookups</A></P> Thu, 23 Feb 2017 14:57:56 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-automatically-run-iplocation-on-a-client-ip/m-p/314700#M58926 woodcock 2017-02-23T14:57:56Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-automatically-run-iplocation-on-a-client-ip/m-p/314701#M58927 <P>@theeansible - Did the answer provided by woodcock help provide a working solution to your question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback. Thanks!</P> Fri, 21 Apr 2017 02:48:58 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-automatically-run-iplocation-on-a-client-ip/m-p/314701#M58927 aaraneta_splunk 2017-04-21T02:48:58Z