I got the same error message as you, you will need to install GeoIP and GeoIP python module take a look in /opt/splunk/etc/apps/GeoASN/README after that verify that this command works /opt/splunk/bin/splunk cmd python ga.py < ga.csv you also need to include the field src_asn in the search results. ... View more