Splunk Enterprise

Iplocation not giving any results

haripriyasarve1
Explorer

Hi all,

 

I am trying to build a dashboard to show from where the client geographically accessed the splunk web UI. Unfortunately when I use iplocation command it is returning fields country, city but not any values. Please help out. 
I checked my $splunkhone/share directory, data base is available there.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

If the IP address doesn't exist in the database (such as with internal addresses like 10.0.0.0/8) then no results will be returned by iplocation.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...