Hi,
I'm aware you might not be looking for the answer to this question anymore, but for anyone else interested here's the current status:
- The GeoASN app hasn't been updated in 3 years so nobody really knows if it still works in Splunk 6+
- I just tested creating all the dependencies on a Linux system using the same Python versions and copying the stuff over, also tried placing them in different folders as things look like they've been moved around somewhere between Splunk 5 and 6, but could not get it to work. The lookup script returns error code 1.
It would be great if someone would update the GeoASN app or create a new Splunk 6+ compatible version.
