how to use two geoip database

perlish · ‎09-09-2012

hi, i bought two geoip database from maxmind.
Geoip city and Gepip isp, how to use two?
thankyou

perlish · ‎09-10-2012

anyone could be kind enough to do me a favor and combine geocity and geo isp in one app ?
Thank you!

MarioM · ‎09-09-2012

you will either need :

-to modify the splunk/etc/apps/MAXMIND/bin/geoip.py

or

-duplicate the apps and change his name(folder and splunk/etc/apps/MAXMIND/default/app.conf) and search command in splunk/etc/apps/MAXMIND/default/transforms.conf.

how to use two geoip database

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Join the Conversation

how to use two geoip database

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk