Splunk Search

iplocation is available in version 5?

the_wolverine
Champion

According to this link, iplocation command is available in version 5.0. I'm not sure if this is incorrect or if my installation is incorrect.

http://docs.splunk.com/Documentation/Splunk/5.0.3/SearchReference/Iplocation

0 Karma

piebob
Splunk Employee
Splunk Employee

yes, iplocation is available in all versions of Splunk. as noted above, it requires that your Splunk instance have access to the internet, as it uses the http://hostip.info service to provide the location information. i've edited the relevant topic to clarify this.

the_wolverine
Champion

Yes, I've tried to use it per the documented example and it just hangs. I figured out after digging around that it requires a connection to the Internet -- which should probably be documented.

0 Karma

piebob
Splunk Employee
Splunk Employee

can you be more clear? does it not work in your installation? what happens when you try to use it?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...