All Apps and Add-ons

Can iplocation be extended for new fields to use the ISP and Organization fields from a commercial MaxMind database?

ebailey
Communicator

We have a subscription for MaxMind and I am trying to figure out how to use the ISP and Organization fields from the database. Can iplocation be extended for new fields, or do I have to build an TA?

Thanks!

woodcock
Esteemed Legend
0 Karma

ebailey
Communicator

Working on the SecKit App which appears to be broken out of the box, but a good starting point. I am close to having it working. I was hoping that the iplocation command could be extended. Thanks!

woodcock
Esteemed Legend

If it works out, click "Accept" to close the question.

0 Karma
Get Updates on the Splunk Community!

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Using the Splunk Threat Research Team’s Latest Security Content

REGISTER HERE Tech Talk | Security Edition Did you know the Splunk Threat Research Team regularly releases ...