Skip to main content
Warning
This app is archived. App archiving documentation
MaxMind Database Tracker app icon

MaxMind Database Tracker

So, you have Splunk running some Geo-location / iplocation queries, but the location results are sometimes wrong! Simple, your on-board Geo-Location DB (MaxMind) is out of date. It is only usually updated when Splunk is upgraded, but no more! Keep an eye on and set alerts for when the latest DB is released with this handy app. It checks every 12 hours for a new DB release on the MaxMind Website. If there is a new version released you can see the difference in MD5 value on the dashboard as well as an alert in 'Triggered Alarms'. (Set an email alert too!) Once you have the alert, download the new DB, overwrite the one in $splunk_home$/share, restart Splunk and Boom! You are bang up to date again!Built by Mark Hill
splunk product badge
Default Version 1.2.0

January 20, 2020

Compatibility

Splunk Enterprise

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

Rating
5
(1)

Log in to rate this app

Support
Archived Add-on

So, you have Splunk running some Geo-location / iplocation queries, but the location results are sometimes wrong! Simple, your on-board Geo-Location DB (MaxMind) is out of date. It is only usually updated when Splunk is upgraded, but no more! Keep an eye on and set alerts for when the latest DB is released with this handy app. It checks every 12 hours for a new DB release on the MaxMind Website. If there is a new version released you can see the difference in MD5 value on the dashboard as well as an alert in 'Triggered Alarms'. (Set an email alert too!) Once you have the alert, download the new DB, overwrite the one in $splunk_home$/share, restart Splunk and Boom! You are bang up to date again!