Non-functioning geo-ip database-f5-all

Non-functioning geo-ip database-f5-all

Vendor: f5

OS: all

Description:
indeni will alert if the geo-ip database is corrupted.

Remediation Steps:
Contact F5 support.

How does this work?
This alert logs into the F5 load balancer and makes a lookup in the geo-ip database to verify it’s functionality.

Why is this important?
The geo-ip database provides meta data related to an IP address, such as city, region, country and ISP. Should the database be unavailable any attempts to retrieve geo-ip data could cause unpredictable behaviour.

Without Indeni how would you find this?
To check the data base version, first log in to the unit with SSH. Then list the available files in “/shared/GeoIP”. For each file, issue the following command: "geoip_lookup -f /shared/GeoIP/ ". Example: “geoip_lookup -f /shared/GeoIP/F5GeoIP.dat 8.8.8.8”. If a record was returned the database is intact.

f5-geo-ip-lookup

Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/parsers/src/f5/host/geo-ip-lookup/geo-ip-lookup.ind.yaml

f5_geoip_corrupt

Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/templatebased/f5/f5_geoip_corrupt.scala