Google maps Errors

[abovebeyond]

Hey , i ran a search string on Google Map application and i get the following errors:

search string:
source=myapp:514 | geoip clientip

Traceback (most recert call last:)
KeyError: 'clientip'

I have the field clientip in my search , and i have events.

what is wrong here?

Thanks !

[woodcock · Accepted solution]

The geoip app is no longer necessary because the feature is now built into Splunk via the iplocation command so try this:

source=myapp:514 | iplocation clientip

[abovebeyond]

thanks ill try it !

[abovebeyond]

hey Woodcock ,

i tried with the "iplocation" command , there is no error now but i cannot see the location in the google map application...

[woodcock]

Go to the search bar (not in a dashboard), type in your new search, click on the Visualization tab, click on the leftmost menu/control (just under the word "Events" and select Map. You no longer need Google at all.

[abovebeyond]

Thanks , just upgrade splunk version .. didnt know it exist

[woodcock]

The problem has to do with clientip so either you do not have the field or the field's value is not in an appropriate format. Show us an event.