Splunk Enterprise

Auto Update MaxMind Database

VijaySrrie
Builder

Hi Team,

We are trying to install - Auto Update MaxMind Database into our splunk

https://splunkbase.splunk.com/app/5482   --> This is the splunk app  

We have the account id and the license key

While testing this by running command - | maxminddbupdate 

We got below error 

HTTPSConnectionPool(host='download.maxmind.com', port=443): Max retries exceeded with url: /geoip/databases/GeoLite2-City/download?suffix=tar.gz (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1106)')))

Labels (1)
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@VijaySrrie- It seems you have Proxy issue or Proxy SSL issue. App's GitHub page's Configuration section describe solution to this Proxy or SSL problem.

https://github.com/CrossRealms/Splunk-App-Auto-Update-MaxMind-Database

 

I hope this helps!!! Kindly upvote if this helps!!!

0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...