Splunk Enterprise

Auto Update MaxMind Database

VijaySrrie
Builder

Hi Team,

We are trying to install - Auto Update MaxMind Database into our splunk

https://splunkbase.splunk.com/app/5482   --> This is the splunk app  

We have the account id and the license key

While testing this by running command - | maxminddbupdate 

We got below error 

HTTPSConnectionPool(host='download.maxmind.com', port=443): Max retries exceeded with url: /geoip/databases/GeoLite2-City/download?suffix=tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1106)')))

Labels (1)
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@VijaySrrie- It seems you have Proxy issue or Proxy SSL issue. App's GitHub page's Configuration section describe solution to this Proxy or SSL problem.

https://github.com/CrossRealms/Splunk-App-Auto-Update-MaxMind-Database

 

I hope this helps!!! Kindly upvote if this helps!!!

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...