Splunk Enterprise

Auto Update MaxMind Database

VijaySrrie
Builder

Hi Team,

We are trying to install - Auto Update MaxMind Database into our splunk

https://splunkbase.splunk.com/app/5482   --> This is the splunk app  

We have the account id and the license key

While testing this by running command - | maxminddbupdate 

We got below error 

HTTPSConnectionPool(host='download.maxmind.com', port=443): Max retries exceeded with url: /geoip/databases/GeoLite2-City/download?suffix=tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1106)')))

Labels (1)
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@VijaySrrie- It seems you have Proxy issue or Proxy SSL issue. App's GitHub page's Configuration section describe solution to this Proxy or SSL problem.

https://github.com/CrossRealms/Splunk-App-Auto-Update-MaxMind-Database

 

I hope this helps!!! Kindly upvote if this helps!!!

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...