Default Version 1.1.3
June 30, 2026
Compatibility
Splunk Enterprise, Splunk Cloud
Platform Version: 10.4, 10.3, 10.2
Rating
5
(2)
Log in to rate this app
Support
Developer Supported app
This is a Splunk app for MaxMind GeoIP database lookups. It provides IP geolocation and enrichment using MaxMind's GeoIP and GeoLite databases, including country, city, anonymous IP detection, ISP, and more.
The app provides a streaming search command (geoip) that enriches events with data from one or more MaxMind databases.
Categories
Security, Fraud & Compliance
Created By
William Storey
Contributors
Gregory Oschwald
Source Code
geoip-splunk(Opens new window)Type
app
Downloads
144
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing