getting errors when using geoip

[ddholstadz]

I get a NoneType is not iterable while piping to geoip on version 4.1.5, build 85165. I am able to run the same command on another search head running 4.1.2 and do not get this error. Does anyone know what might be causing it?

Search: source="*access_log*" | geoip clientip Error: External search command 'geoip' returned error code 1. Script output = "Traceback (most recent call last): File "/opt/splunk/bin/runScript.py", line 69, in execfile(REAL_SCRIPT_NAME) File "/opt/splunk/etc/apps/maps/bin/geoip.py", line 115, in if not ip_field in headers: TypeError: argument of type 'NoneType' is not iterable "

[ziegfried · Accepted solution]

There seems to be a problem in some cases where the incoming CSV has not not be parsed correctly. This should be fixed in the next version of the GoogleMaps app which will be released soon.