Splunk Search

Is there a way to get additional fields from whois via iplocation command

a212830
Champion

Hi,

Is there a way to get the "Resolve host" "NetName" "Organization" fields from whois, using the iplocation command? From what I can see, it only supports a small subset of the information that is available. Has anyone come up with an alternative or some setting that I'm missing?

0 Karma

starcher
Influencer

No. iplocation command uses a local copy of the free edition of the maxmind database.

sloshburch
Splunk Employee
Splunk Employee

Do you know if the not-free edition would provide those features to address this for @a212830?

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...