https://community.splunk.com/t5/Splunk-Search/iplocation-is-not-working/m-p/485836#M135926 <P>That address isn't in my database (I'm not updating it), but this code works for me using IP addresses that are in my database:</P> <PRE><CODE>| makeresults | eval ip_address="152.89.162.133" | iplocation ip_address </CODE></PRE> Tue, 21 Jan 2020 17:14:13 GMT efavreau 2020-01-21T17:14:13Z https://community.splunk.com/t5/Splunk-Search/iplocation-is-not-working/m-p/485835#M135925 <P>Hello,<BR /> iplocation is not working for some IP addresses (152.89.162.133 for example)<BR /> But this IP location is in the GeoLite2 City database (checked by opening it with python)<BR /> Could you tell me how to make the iplocation command working properly please?<BR /> Thanks in advance and have a great day!<BR /> Best regards</P> Tue, 21 Jan 2020 14:23:02 GMT https://community.splunk.com/t5/Splunk-Search/iplocation-is-not-working/m-p/485835#M135925 securiteinforma 2020-01-21T14:23:02Z https://community.splunk.com/t5/Splunk-Search/iplocation-is-not-working/m-p/485836#M135926 <P>That address isn't in my database (I'm not updating it), but this code works for me using IP addresses that are in my database:</P> <PRE><CODE>| makeresults | eval ip_address="152.89.162.133" | iplocation ip_address </CODE></PRE> Tue, 21 Jan 2020 17:14:13 GMT https://community.splunk.com/t5/Splunk-Search/iplocation-is-not-working/m-p/485836#M135926 efavreau 2020-01-21T17:14:13Z https://community.splunk.com/t5/Splunk-Search/iplocation-is-not-working/m-p/485837#M135927 <P>Hello efavreau,</P> <P>Thank you for your response. I tried again and it is working now. I already have restarted Splunk yesterday and it did not change anything. But maybe waiting one night has updated the configuration, I don't know.</P> <P>Have a nice day!<BR /> Best regards</P> Wed, 22 Jan 2020 07:43:54 GMT https://community.splunk.com/t5/Splunk-Search/iplocation-is-not-working/m-p/485837#M135927 securiteinforma 2020-01-22T07:43:54Z