Archive
Highlighted

Splunk_CiscoSecuritySuite 1.0.1 Error

Engager

Hi,

I added Splunk_CiscoSecuritySuite 1.0.1 today.
There is an error on the top of the Cisco SecuritySuite web:

"Error in 'lookup' command: The lookup table 'geoip' does not exist."

"Unable to find an eventtype ironport*"

How to resolve?

Thanks

Tags (1)
0 Karma
Highlighted

Re: Splunk_CiscoSecuritySuite 1.0.1 Error

New Member

Anyone have any experience with this error? I have the exact same thing.

0 Karma
Highlighted

Re: Splunk_CiscoSecuritySuite 1.0.1 Error

New Member

I installed the apps Cisco Ironport Web Security Appliance and MAXMIND. That solved the problem for me.

0 Karma
Highlighted

Re: Splunk_CiscoSecuritySuite 1.0.1 Error

New Member

install apps Geo Localisation

0 Karma