<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Google maps Errors in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162625#M186009</link>
    <description>&lt;P&gt;Hey , i ran a search string on Google Map application and i get the following errors:&lt;/P&gt;

&lt;P&gt;search string: &lt;BR /&gt;
source=myapp:514 | geoip clientip&lt;/P&gt;

&lt;P&gt;Traceback (most recert call last:)&lt;BR /&gt;
KeyError: 'clientip' &lt;/P&gt;

&lt;P&gt;I have the field clientip in my search , and i have events.&lt;/P&gt;

&lt;P&gt;what is wrong here?&lt;/P&gt;

&lt;P&gt;Thanks ! &lt;/P&gt;</description>
    <pubDate>Thu, 06 Aug 2015 14:55:30 GMT</pubDate>
    <dc:creator>abovebeyond</dc:creator>
    <dc:date>2015-08-06T14:55:30Z</dc:date>
    <item>
      <title>Google maps Errors</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162625#M186009</link>
      <description>&lt;P&gt;Hey , i ran a search string on Google Map application and i get the following errors:&lt;/P&gt;

&lt;P&gt;search string: &lt;BR /&gt;
source=myapp:514 | geoip clientip&lt;/P&gt;

&lt;P&gt;Traceback (most recert call last:)&lt;BR /&gt;
KeyError: 'clientip' &lt;/P&gt;

&lt;P&gt;I have the field clientip in my search , and i have events.&lt;/P&gt;

&lt;P&gt;what is wrong here?&lt;/P&gt;

&lt;P&gt;Thanks ! &lt;/P&gt;</description>
      <pubDate>Thu, 06 Aug 2015 14:55:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162625#M186009</guid>
      <dc:creator>abovebeyond</dc:creator>
      <dc:date>2015-08-06T14:55:30Z</dc:date>
    </item>
    <item>
      <title>Re: Google maps Errors</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162626#M186010</link>
      <description>&lt;P&gt;The problem has to do with &lt;CODE&gt;clientip&lt;/CODE&gt; so either you do not have the field or the field's value is not in an appropriate format.  Show us an event.&lt;/P&gt;</description>
      <pubDate>Thu, 06 Aug 2015 15:56:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162626#M186010</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2015-08-06T15:56:48Z</dc:date>
    </item>
    <item>
      <title>Re: Google maps Errors</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162627#M186011</link>
      <description>&lt;P&gt;The &lt;CODE&gt;geoip&lt;/CODE&gt; app is no longer necessary because the feature is now built into Splunk via the &lt;CODE&gt;iplocation&lt;/CODE&gt; command so try this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;source=myapp:514 | iplocation clientip
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 06 Aug 2015 15:59:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162627#M186011</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2015-08-06T15:59:09Z</dc:date>
    </item>
    <item>
      <title>Re: Google maps Errors</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162628#M186012</link>
      <description>&lt;P&gt;thanks ill try it !&lt;/P&gt;</description>
      <pubDate>Thu, 06 Aug 2015 16:02:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162628#M186012</guid>
      <dc:creator>abovebeyond</dc:creator>
      <dc:date>2015-08-06T16:02:40Z</dc:date>
    </item>
    <item>
      <title>Re: Google maps Errors</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162629#M186013</link>
      <description>&lt;P&gt;hey Woodcock ,&lt;/P&gt;

&lt;P&gt;i tried with the "iplocation" command , there is no error now but i cannot see the location in the google map application... &lt;/P&gt;</description>
      <pubDate>Sun, 09 Aug 2015 08:50:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162629#M186013</guid>
      <dc:creator>abovebeyond</dc:creator>
      <dc:date>2015-08-09T08:50:48Z</dc:date>
    </item>
    <item>
      <title>Re: Google maps Errors</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162630#M186014</link>
      <description>&lt;P&gt;Go to the search bar (not in a dashboard), type in your new search, click on the &lt;CODE&gt;Visualization&lt;/CODE&gt; tab, click on the leftmost menu/control (just under the word "Events" and select &lt;CODE&gt;Map&lt;/CODE&gt;.  You no longer need Google at all.&lt;/P&gt;</description>
      <pubDate>Sun, 09 Aug 2015 13:53:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162630#M186014</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2015-08-09T13:53:26Z</dc:date>
    </item>
    <item>
      <title>Re: Google maps Errors</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162631#M186015</link>
      <description>&lt;P&gt;Thanks , just upgrade splunk version .. didnt know it exist &lt;/P&gt;</description>
      <pubDate>Sun, 09 Aug 2015 14:01:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Google-maps-Errors/m-p/162631#M186015</guid>
      <dc:creator>abovebeyond</dc:creator>
      <dc:date>2015-08-09T14:01:04Z</dc:date>
    </item>
  </channel>
</rss>

