Splunk Search

Is it possible to do GeoIP of private IPaddresses?

rosho
Communicator

Hi

I am a user of Splunk and Elasticsearch.
I want to do GeoIP with private IPaddresses. There is information about it on the Elasticsearch forum (ex: Private networks with GeoIP This confirms that it is possible with Elasticsearch. But what about Splunk?

Thank you

0 Karma
1 Solution

starcher
SplunkTrust
SplunkTrust

If you maintain an asset list of IP ranges to lat/long you could put it into a lookup and use that.

View solution in original post

starcher
SplunkTrust
SplunkTrust

If you maintain an asset list of IP ranges to lat/long you could put it into a lookup and use that.

rosho
Communicator

Can you give me an example of how does the lookup would look like?

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...