Skip to content
This repository was archived by the owner on May 20, 2025. It is now read-only.

Update SecKit_geo_lookup.py "GeoIP2-Anonymous-IP.mmdb" if code to mat…#192

Open
githubkeithm wants to merge 1 commit into
splunk:mainfrom
githubkeithm:main
Open

Update SecKit_geo_lookup.py "GeoIP2-Anonymous-IP.mmdb" if code to mat…#192
githubkeithm wants to merge 1 commit into
splunk:mainfrom
githubkeithm:main

Conversation

@githubkeithm
Copy link
Copy Markdown

…ch the result dictionary to the anonymous_ip object attributes (as given at https://dev.maxmind.com/geoip/docs/databases/anonymous-ip?lang=en). Updated Splunk macros.conf and transforms.conf to support the changes to the result dictionary. This work is to resolve the follow errors received when loading the "GeoIP2-Anonymous-IP.mmdb" database.

This work was to correct the following code exception(s):

Exception has occurred: AttributeError
'AnonymousIP' object has no attribute 'is_anonymous_proxy'
File "/opt/splunk/etc/apps/SecKit_SA_geolocation/bin/SecKit_geo_lookup.py", line 105, in main
result["is_anonymous_proxy"] = anon_response.is_anonymous_proxy
File "/opt/splunk/etc/apps/SecKit_SA_geolocation/bin/SecKit_geo_lookup.py", line 121, in
main()

And resulting Splunk error:

Error in 'lookup' command: Script execution failed for external search command '/opt/splunk/etc/apps/SecKit_SA_geolocation/bin/SecKit_geo_lookup.py'.
The search job has failed due to an error.

@githubkeithm githubkeithm requested a review from a team as a code owner January 24, 2022 18:29
@githubkeithm githubkeithm requested review from hetangmodi-crest, samirhadfa-splunk and spuvvada-splunk and removed request for a team January 24, 2022 18:29
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jan 24, 2022

CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅

@githubkeithm
Copy link
Copy Markdown
Author

I have read the CLA Document and I hereby sign the CLA

1 similar comment
@githubkeithm
Copy link
Copy Markdown
Author

I have read the CLA Document and I hereby sign the CLA

@githubkeithm
Copy link
Copy Markdown
Author

recheck

…ch the result dicto the anonymous_ip object attributes (as given at https://dev.maxmind.com/geoip/docs/databases/anonymous-ip?lang=en).  Updated macros.conf and transforms.conf to support the changes to the result dic.
@hetangmodi-crest hetangmodi-crest removed their request for review February 16, 2022 05:26
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant