Splunk Search

getting errors when using geoip

ddholstadz
Explorer

I get a NoneType is not iterable while piping to geoip on version 4.1.5, build 85165. I am able to run the same command on another search head running 4.1.2 and do not get this error. Does anyone know what might be causing it?

Search: source="*access_log*" | geoip clientip Error: External search command 'geoip' returned error code 1. Script output = "Traceback (most recent call last): File "/opt/splunk/bin/runScript.py", line 69, in execfile(REAL_SCRIPT_NAME) File "/opt/splunk/etc/apps/maps/bin/geoip.py", line 115, in if not ip_field in headers: TypeError: argument of type 'NoneType' is not iterable "

Tags (1)
0 Karma
1 Solution

ziegfried
Influencer

There seems to be a problem in some cases where the incoming CSV has not not be parsed correctly. This should be fixed in the next version of the GoogleMaps app which will be released soon.

View solution in original post

0 Karma

ziegfried
Influencer

There seems to be a problem in some cases where the incoming CSV has not not be parsed correctly. This should be fixed in the next version of the GoogleMaps app which will be released soon.

View solution in original post

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!