For details, see:
Configure Google Maps for visual geolocation data
The MaxMind app provides a geolocate_IP
action that uses Google Maps functionality to show a world map with a marker indicating the approximate location of the IP under investigation. You must provide a Google Maps API key to enable this functionality. See the Maps JavaScript API page in the Google Maps Platform documentation for more information about obtaining a Google Maps API key.
After obtaining an API key, perform the following steps:
- From the Home Menu, select Administration.
- Select Administration Settings > Google Maps.
- Enter your API key into the field.
- Click Save Changes.
With a proper API key applied, MaxMind Geolocate IP displays a map with searches.
Customize your forwarder configuration | Manage your organization's credentials with a password vault |
This documentation applies to the following versions of Splunk® SOAR (On-premises): 5.3.3, 5.3.4, 5.3.5, 5.3.6, 5.4.0, 5.5.0, 6.0.0, 6.0.1, 6.0.2, 6.1.0, 6.1.1, 6.2.0, 6.2.1, 6.2.2, 6.3.0, 6.3.1, 6.4.0
Feedback submitted, thanks!