All Apps and Add-ons

Unable to configure SecKit for geolocation with Maxmind

tjmurphyjr
Explorer

After installing the app I am unable to configure it. Neither the "Input" or "Configuration" panels will load - they simply clock. The one message i am able to find is:

 "Unable to initialize modular input "geoipupdate" defined inside the app "SecKit_SA_geolocation": Introspecting scheme=geoipupdate: script running failed (exited with code 1)."

Have tried this on an ES and Search Head instance with the same results.

Labels (2)
0 Karma

rfaircloth_splu
Splunk Employee
Splunk Employee

Hi this is my app ,what version of Splunk are you using?

0 Karma

tjmurphyjr
Explorer

We are currently on v7.2.7

0 Karma

drsharp
Explorer

also having similar error on getting app to load on 7.3.5 .
Checking conf files for problems...
Invalid key in stanza [geoipupdate] in /opt/splunk/etc/apps/SecKit_SA_geolocation/default/inputs.conf, line 2: python.version (value: python3).
Invalid key in stanza [admin_external:SecKit_SA_geolocation_account] in /opt/splunk/etc/apps/SecKit_SA_geolocation/default/restmap.conf, line 7: python.version (value: python3).
Invalid key in stanza [admin_external:SecKit_SA_geolocation_settings] in /opt/splunk/etc/apps/SecKit_SA_geolocation/default/restmap.conf, line 13: python.version (value: python3).
Invalid key in stanza [admin_external:SecKit_SA_geolocation_geoipupdate] in /opt/splunk/etc/apps/SecKit_SA_geolocation/default/restmap.conf, line 19: python.version (value: python3).

0 Karma

rfaircloth_splu
Splunk Employee
Splunk Employee

Looks like something is wrong on py2 I will try to get a look at it this month

0 Karma

acaruso
Explorer

I'm having the same issue. SH is v 7.1.1

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...