Splunk Enterprise

Iplocation not giving any results

haripriyasarve1
Explorer

Hi all,

 

I am trying to build a dashboard to show from where the client geographically accessed the splunk web UI. Unfortunately when I use iplocation command it is returning fields country, city but not any values. Please help out. 
I checked my $splunkhone/share directory, data base is available there.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

If the IP address doesn't exist in the database (such as with internal addresses like 10.0.0.0/8) then no results will be returned by iplocation.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

Register Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and ...