Hi
I'm trying to plot some IPs on a map with this App. I've just installed it and its listed correctly in the apps section. However when I try a basic geomap query like :
sourcetype="xxxxx" | geoip remote_ip
I get the following error :
Streamed search execute failed because: Error in 'script': Getinfo probe failed for external search command 'geoip'
I've searched the forum already, but all the anwers suggest I install the app on both the search head and the indexer. But in our case that is the same box, so I'm a little lost.
Any help would be much appreciated ... Management likes graphics.
ps: I did install the MAXMIND app first and was able to get countries as fields with this, maybe there is some conflict as it uses the same components ? MAXMIND queries still work without issues though.
Try:
sourcetype="xxxxx" remote_ip=* | stats count by remote_ip | geoip remote_ip