Default Version 1.2.0
July 29, 2026
Compatibility
Splunk Enterprise, Splunk Cloud
Platform Version: 10.5, 10.4, 10.3, 10.2
Rating
5(2)
Log in to rate this app
Support
Developer Supported
This is a Splunk app for MaxMind GeoIP database lookups. It provides IP geolocation and enrichment using MaxMind's GeoIP and GeoLite databases, including country, city, anonymous IP detection, ISP, and more. The app provides a streaming search command (geoip) that enriches events with data from one or more MaxMind databases.
Categories
Security, Fraud & Compliance
Created by
William Storey
Contributors
Gregory Oschwald
Source code
Type
app
Downloads
218
Splunk Answers
Resources
Log in to report this app listing.