Installation

iplocation missing after upgrade

jgauthier
Contributor

I upgraded to splunk 6.0 and noticed some reports were not working.
I did some discovery and found that iplocation.py is now missing.

Can someone explain? What can be done to get this file back?

Tags (2)
0 Karma

lguinn2
Legend

In my Splunk 6, I found it at $SPLUNK_HOME/etc/apps/search/bin/iplocation.py

Are you using the command correctly? Here is the description in the documentation for iplocation

I have used this command in the past without supplying an argument, but perhaps an argument is now required?

0 Karma

jgauthier
Contributor

I am using it correctly, as it has worked for 2 years. The file is completely missing in my Splunk 6 install. Ive opened a ticket. I copied it from a 5.0.5 install, but the two columns are never added to any query. (whether i specify the Ip field or not)

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...