Splunk Search

Is it possible to do GeoIP of private IPaddresses?

rosho
Communicator

Hi

I am a user of Splunk and Elasticsearch.
I want to do GeoIP with private IPaddresses. There is information about it on the Elasticsearch forum (ex: Private networks with GeoIP This confirms that it is possible with Elasticsearch. But what about Splunk?

Thank you

0 Karma
1 Solution

starcher
SplunkTrust
SplunkTrust

If you maintain an asset list of IP ranges to lat/long you could put it into a lookup and use that.

View solution in original post

starcher
SplunkTrust
SplunkTrust

If you maintain an asset list of IP ranges to lat/long you could put it into a lookup and use that.

rosho
Communicator

Can you give me an example of how does the lookup would look like?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...