iplocation missing after upgrade


I upgraded to splunk 6.0 and noticed some reports were not working.
I did some discovery and found that is now missing.

Can someone explain? What can be done to get this file back?

Tags (2)
0 Karma


In my Splunk 6, I found it at $SPLUNK_HOME/etc/apps/search/bin/

Are you using the command correctly? Here is the description in the documentation for iplocation

I have used this command in the past without supplying an argument, but perhaps an argument is now required?

0 Karma


I am using it correctly, as it has worked for 2 years. The file is completely missing in my Splunk 6 install. Ive opened a ticket. I copied it from a 5.0.5 install, but the two columns are never added to any query. (whether i specify the Ip field or not)

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...