MaxMind GeoIP2 Add-on for Splunk

This Splunk technology add-on provides a custom search commmand (`geoip`) to query local MaxMind GeoIP2 databases for IP address enrichment. The command can look up IPv4 or IPv6 addresses and return details from the Anonymous-IP, City, Connection-Type, Domain, and ISP databases.