Setting up the Geographical Database

To use the geoiplookup function to fetch the geographical information of a specified IP address, an administrator must download the appropriate MaxMind database.

You can use the geoiplookup function in LogLogic LMI to search logs that originated from a particular geographical area such as location, country, city, postal code, and so on. You can use the function within SQL and EQL queries, in Advanced Search, and in Advanced Dashboards.

Download the required MaxMind database file (.mmdb) on your appliance to the /loglogic/data/geoIP directory.

Note: You do not need to restart the appliance after replacing the .mmdb file.

Important Considerations

  • The function can use only one .mmdb file at a time. Therefore, ensure that the /loglogic/data/geoIP directory includes only one.
  • In a Management Station setup, you must copy the .mmdb file to each Remote Appliance.
  • In a High Availability environment, the .mmdb file on the active appliance is automatically replicated on the standby appliance.

Related Topics

For more information, see the following topics in the TIBCO LogLogic® Log Management Intelligence User Guide: