<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Why are the iplocations not working at all? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Why-are-the-iplocations-not-working-at-all/m-p/547153#M155124</link>
    <description>&lt;P&gt;I have same issue and the IPs are public IPs too.&lt;/P&gt;</description>
    <pubDate>Thu, 08 Apr 2021 06:38:19 GMT</pubDate>
    <dc:creator>riddhipv</dc:creator>
    <dc:date>2021-04-08T06:38:19Z</dc:date>
    <item>
      <title>Why are the iplocations not working at all?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-are-the-iplocations-not-working-at-all/m-p/449204#M127209</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;My iplocation is not working at all, what am i missing?&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=_internal sourcetype=splunkd_ui_access | stats count by clientip   | iplocation clientip
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I don't get any city or country at all.&lt;/P&gt;

&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/6733i1F2C978294D989AA/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;I am on Splunk Version:7.1.6 [Dec 2018], these are the files i currently have in the directory.&lt;BR /&gt;
Do i need to update them to get this to work, or should something work by default?&lt;/P&gt;

&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/6734i4AB352147EDE1888/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 19 Mar 2019 11:04:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-are-the-iplocations-not-working-at-all/m-p/449204#M127209</guid>
      <dc:creator>robertlynch2020</dc:creator>
      <dc:date>2019-03-19T11:04:47Z</dc:date>
    </item>
    <item>
      <title>Re: Why are the iplocations not working at all?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-are-the-iplocations-not-working-at-all/m-p/449205#M127210</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;Those all IPs are private IPs (&lt;A href="https://en.wikipedia.org/wiki/Private_network"&gt;https://en.wikipedia.org/wiki/Private_network&lt;/A&gt;) and for private IP there are no IP location because these IP ranges are specifically reserved for Internal network.&lt;/P&gt;</description>
      <pubDate>Tue, 19 Mar 2019 11:12:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-are-the-iplocations-not-working-at-all/m-p/449205#M127210</guid>
      <dc:creator>harsmarvania57</dc:creator>
      <dc:date>2019-03-19T11:12:10Z</dc:date>
    </item>
    <item>
      <title>Re: Why are the iplocations not working at all?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-are-the-iplocations-not-working-at-all/m-p/449206#M127211</link>
      <description>&lt;P&gt;There are only private IP addresses in your screenshot, no public ones. There is no location lookup for private IP addresses.&lt;/P&gt;

&lt;P&gt;The iplookup command itself works, otherwise you wouldn't get the columns for City and Country. It is just not possible to determine these for private IPs.&lt;/P&gt;</description>
      <pubDate>Tue, 19 Mar 2019 11:14:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-are-the-iplocations-not-working-at-all/m-p/449206#M127211</guid>
      <dc:creator>knielsen</dc:creator>
      <dc:date>2019-03-19T11:14:27Z</dc:date>
    </item>
    <item>
      <title>Re: Why are the iplocations not working at all?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-are-the-iplocations-not-working-at-all/m-p/449207#M127212</link>
      <description>&lt;P&gt;ok- cheers and thanks&lt;/P&gt;</description>
      <pubDate>Tue, 19 Mar 2019 11:18:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-are-the-iplocations-not-working-at-all/m-p/449207#M127212</guid>
      <dc:creator>robertlynch2020</dc:creator>
      <dc:date>2019-03-19T11:18:23Z</dc:date>
    </item>
    <item>
      <title>Re: Why are the iplocations not working at all?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-are-the-iplocations-not-working-at-all/m-p/547153#M155124</link>
      <description>&lt;P&gt;I have same issue and the IPs are public IPs too.&lt;/P&gt;</description>
      <pubDate>Thu, 08 Apr 2021 06:38:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-are-the-iplocations-not-working-at-all/m-p/547153#M155124</guid>
      <dc:creator>riddhipv</dc:creator>
      <dc:date>2021-04-08T06:38:19Z</dc:date>
    </item>
  </channel>
</rss>

