All Apps and Add-ons

Splunk_CiscoSecuritySuite 1.0.1 Error

coldface
Engager

Hi,

I added Splunk_CiscoSecuritySuite 1.0.1 today.
There is an error on the top of the Cisco SecuritySuite web:

"Error in 'lookup' command: The lookup table 'geoip' does not exist."

"Unable to find an eventtype ironport*"

How to resolve?

Thanks

Tags (1)
0 Karma

sonatel
New Member

install apps Geo Localisation

0 Karma

saschier
New Member

I installed the apps Cisco Ironport Web Security Appliance and MAXMIND. That solved the problem for me.

0 Karma

borregod
New Member

Anyone have any experience with this error? I have the exact same thing.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...