All Apps and Add-ons

how to update the maxmind db in Geo Location lookup script?

peasead
Path Finder

Again, very good app.

How can we update the database? I assume ~/bin/GeoLiteCity.dat is what needs to be updated? What needs to be downloaded from MAXMIND and put where?

sonicZ
Contributor

I believe you can update the existing GeoLiteCity.dat with the files available from maxmind
http://www.maxmind.com/en/geolite
unzip the latest binary in the directory with the existing .dat file.

I am using the GeoASN app and the files reside in a different location.

> [root@splunksearch1-d1-inf apps]# ls
> -l /app/splunk/etc/apps/GeoASN/lookups/
> total 84460
> -rw-rw-r-- 1 root   root    3872281 Apr  2  2011 GeoIPASNum.dat
> -rw-r--r-- 1 splunk splunk 54878292 Jun 15  2012 GeoLiteCity.dat
> -rw-rw-r-- 1 root   root   27629545 Apr  4  2011 GeoLiteCity.old
Get Updates on the Splunk Community!

Happy CX Day to our Community Superheroes!

Happy 10th Birthday CX Day!What is CX Day? It’s a global celebration recognizing innovation and success in the ...

Check out This Month’s Brand new Splunk Lantern Articles

Splunk Lantern is a customer success center providing advice from Splunk experts on valuable data insights, ...

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...