Are there addons for Splunk geolocating devices?

[jip31]

Hello

I have basic questions about hte way to geolocate devices with Splunk

Is an addon exists?

If not, is it possible to correlate a tool like NetDB with Splunk using DB Connect?

https://web.stanford.edu/group/networking/netdb/help/prod/netdb.html

If yes, what are the prerequesites for doing this?

Thanks

[seth_a_zuykn-io]

@jip31 I know this is an older post, but if you don't have the External Public Egress IPs from your UFs or Enterprise, you can use our Get Public IP Add-on to collect them: https://splunkbase.splunk.com/app/8107

[richgalloway]

I don't see an app on splunkbase, but that doesn't mean you can't use the NetDB API to create one.

If there's a JDBC driver for NetDB then you may be able to use DB Connect.

[andrew_nelson]

For public IP address space, Splunk comes with an | iplocation function with data accurate as of the Splunk package being published.
iplocation - Splunk Documentation

The documentation comes with info on how to update the database. 

[jip31]

OK but it will do no work for me because it's not public adress but internal adress