I have the Enterprise Security Suite App installed and working. I can run a geoip search in the Search App and that runs fine. If I try to run the same search string from the Search bar in the ES App I get a error of "Unknown search command 'geoip'" Does anyone have any suggestions on how to fix this?
Thanks,
Found the answer to my problem. I had to add the maps to the /opt/splunk/etc/apps/SA-AccessProtection/metadata/local.meta under the import option.
Found the answer to my problem. I had to add the maps to the /opt/splunk/etc/apps/SA-AccessProtection/metadata/local.meta under the import option.