getting the error code 1 geoip while executing the above mentioned query.let me know what need to be done to fix this issue getting error for almost every geoip issue.
this is the following query which i am trying to execute
.I am trying to execute this query host="IP address"| lookup geoip clientip as src | search client_country="Asia/Pacific Region" | sort by _time | table _time client_city src_ip src_port dest_ip dest_port transport action event_desc
this should help:
https://www.batchworks.de/fix-geoip-and-google-maps-apps-in-splunk-6-1/
regards,
Andreas