About juancamiloll

juancamiloll · ‎06-05-2022

Thank you very much for your help. I followed the steps downloading the file, then unzipping it and moving it to the /splunk/share folder I restarted splunk and it already brings me the countries I expected https://docs.splunk.com/Documentation/Splunk/8.1.3/SearchReference/Iplocation#Updating_the_MMDB_file

juancamiloll · ‎06-01-2022

Hi everyone I am currently getting logs from microsoft 365 and one of its panels shows the impossible simultaneous locations. When I check the IP with any page for whois like virustotal or abuseipdb, for example, from Sweden, I find that it really is from another country. Is there something wrong with the iplocation command or something I need to adjust How can it be solved?

juancamiloll · ‎09-03-2020

in which path and file should I enter that value? @sylim_splunk

juancamiloll · ‎08-19-2020

today I see the same error message and there are no jobs running When checking in other answers for this error message they refer to this folder where they recommend deleting the oldest files But I see 3 types of files the folder weighs 2Gb is it safe to delete this information?

Posts	4
Solutions	0
Karma Given	3
Karma Received	1
Member Since	‎07-03-2020

Online Status	Offline
Date Last Visited	‎06-05-2022 08:21 PM

Why is iplocation command returning wrong countrie...

Re: Why is iplocation command returning wrong coun...

Why is iplocation command returning wrong countrie...

Re: How come my forwarders appear frozen and are u...

Re: The number of search artifacts in the dispatch...