All Apps and Add-ons

Splunk_CiscoSecuritySuite 1.0.1 Error

coldface
Engager

Hi,

I added Splunk_CiscoSecuritySuite 1.0.1 today.
There is an error on the top of the Cisco SecuritySuite web:

"Error in 'lookup' command: The lookup table 'geoip' does not exist."

"Unable to find an eventtype ironport*"

How to resolve?

Thanks

Tags (1)
0 Karma

sonatel
New Member

install apps Geo Localisation

0 Karma

saschier
New Member

I installed the apps Cisco Ironport Web Security Appliance and MAXMIND. That solved the problem for me.

0 Karma

borregod
New Member

Anyone have any experience with this error? I have the exact same thing.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...