All Apps and Add-ons

Splunk_CiscoSecuritySuite 1.0.1 Error

coldface
Engager

Hi,

I added Splunk_CiscoSecuritySuite 1.0.1 today.
There is an error on the top of the Cisco SecuritySuite web:

"Error in 'lookup' command: The lookup table 'geoip' does not exist."

"Unable to find an eventtype ironport*"

How to resolve?

Thanks

Tags (1)
0 Karma

sonatel
New Member

install apps Geo Localisation

0 Karma

saschier
New Member

I installed the apps Cisco Ironport Web Security Appliance and MAXMIND. That solved the problem for me.

0 Karma

borregod
New Member

Anyone have any experience with this error? I have the exact same thing.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

    Are you ready to transform how your team handles complex data requests? We invite you to our upcoming ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...