Maxmind file moved
xxdesmus opened this issue · comments
| asngen | table ip asn autonomous_system | outputlookup asn returns ->
Exception at "/opt/splunk/etc/apps/TA-asngen/bin/asngen.py", line 44 : Please check app proxy settings
Checking the python file seemed to indicate the issue is that https://download.maxmind.com/download/geoip/database/asnum/GeoIPASNum2.zip was not accessible.
Turns out GeoIPASNum2.zip no longer exists. It's a 404.
https://dev.maxmind.com/geoip/geoip2/geolite2/ says:
GeoLite Legacy databases were discontinued on January 2, 2019. Learn more.
GeoLite Legacy databases are no longer available for download. Attempting to download a GeoLite Legacy database file will result in the error: “Database edition not found”.```
new files are available:
`https://geolite.maxmind.com/download/geoip/database/GeoLite2-City-CSV.zip`
`https://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip`
`https://geolite.maxmind.com/download/geoip/database/GeoLite2-ASN-CSV.zip`
I assume the correct path/file is `https://geolite.maxmind.com/download/geoip/database/GeoLite2-ASN-CSV.zip`
Any chance you can review and update the Splunk app?
Ignore me -- sorry. I need to update my app, you already fixed this.