icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading DocoDoco Advance
SHA256 checksum (docodoco-advance_101.tgz) 322a2cecf1cbd49b255c61582a9dce8d6dcf8fa6bc0695eb895c8aaadfc1e890 SHA256 checksum (docodoco-advance_100.tgz) 57b6a0f26a09e618d212abe3eb8e81416c9ed2ae712e27ae27bb47df9b08e8ee
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

splunk

DocoDoco Advance

Splunk Cloud
This app is NOT supported by Splunk. Please read about what that means for you here.
Overview
Details
This add-on enables to add about 55 kinds of information for area, organization and environment to IP addresses, such as country, municipality, organizational name, business type and line, by tying up with “DocoDocoJP” which is a service offered by Geolocation Technology, Inc.

このアドオンは、株式会社Geolocation Technologyのサービス「どこどこJP」と連携し
IPアドレスに対して国や都道府県市区町村、企業名や業種、回線といった
計55種類の地域情報や組織情報、環境を付加することが出来るアドオンです。

Adding the information of area, organization and environment to IP addresses strengthens the visualization of machine data operated by Splunk in the aspect of web analytics; those are security analysis in the event of incidents as divulging of information, illegal login, targeted attack, and analysis of converted user.

IPアドレスに地域や組織、環境情報を付加できる事によって
情報漏えい、不正ログイン、標的型攻撃などのインシデント発生時のセキュリティ分析
コンバージョンしたユーザの分析等の Webアナリティクスの面において
splunkで行えるログの可視化を一層強化します。

You need to sign up with DocoDocoJP (fee-based) for using this application.

※このアプリケーションを使用する為には別途「どこどこJP」(有料)と契約する必要があります。

どこどこJPについて

どこどこJPの詳細については下記のサイトをご参照下さい。
https://www.docodoco.jp/

導入方法

  1. インストール
    Splunk管理画面の「他のAppをサーチ」にアクセスし、「DocoDoco」と検索して「DocoDoco Advance」をインストールします。
  2. どこどこJPに登録、APIキー取得
    どこどこJPに登録しAPIキーを取得します。(有料)
    登録、キーの取得については、下記のページをご参照下さい。
    https://admin.docodoco.jp/signup/
  3. どこどこJPAPIキーの設定
    Splunk 管理画面の上部にある「App」をクリックし、「DocoDoco Advance」を選択します。
    設定画面が表示されますので、APIキー1, APIキー2を入力し「更新」をクリックします。

使用例

| docodoco ipfield=ip

取得可能なデータは、どこどこJPのリターンパラメータに準拠します。
下記ページのリターンパラメータをご参照下さい。

Available data complies with the return parameter of DocoDoco.
Please refer to the following page for the return parameter.

https://www.docodoco.jp/api/rest/

サードパーティデータ

サードパーティデータの場合は、「パラメータ@親ノード名」になります。

法人番号

https://www.docodoco.jp/data/marketplace/corporate-number/

| docodoco ipfield=ip | fields HoujinBangou@HoujinBangou_3 HoujinName@HoujinBangou_3

匿名ネットワーク

https://www.docodoco.jp/data/marketplace/anonymous-network/

| docodoco ipfield=ip | fields Name@AnonymousNetwork_5 Score@AnonymousNetwork_5 Info@AnonymousNetwork_5

天気

https://www.docodoco.jp/data/marketplace/weather-data/
天気予報 気温予報 降水確率 風向き予報は、「WeatherA」
気象現況 紫外線予報は、「WeatherP」として下さい。

| docodoco ipfield=ip | fields TodayWeather@WeatherA Weather@WeatherP

制限等

  • 別途どこどこJPへの契約を行いAPIキーを取得する必要があります。
  • どこどこJPへリクエストを行う為、インターネットへのアクセスが必須です。
  • 処理能力は、インターネット環境等によって変化しますがCPU6コア10並列で1000IP/分程度となります。

About DocoDoco

Please refer to the following site for details of DocoDoco.
https://www.docodoco.jp/

Method of installation

  1. Installation
    Download "DocoDoco Advance" from Splunkbase and install it on Splunk, or search for "DocoDoco Advance" in the Splunk management interface and install it.
  2. Register for DocoDoco JP and Obtain an API Key
    Register with DocoDoco JP to obtain an API key (paid service). For information on registration and key acquisition, please refer to the following page:
    https://admin.docodoco.jp/signup/
  3. Configure the DocoDoco JP API Key
    In the Splunk management interface, click on "App" at the top and select "DocoDoco Advance." The settings page will appear. Enter API Key 1 and API Key 2, then click "Update."

Examples

| docodoco ipfield=ip

Available data complies with the return parameter of DocoDoco.
Please refer to the following page for the return parameter.

https://www.docodoco.jp/api/rest/

Third Party Data

In the case of Third party data, it will be "Parameter@Parent node name".

Corporate Number

https://www.docodoco.jp/data/marketplace/corporate-number/

| docodoco ipfield=ip | fields HoujinBangou@HoujinBangou_3 HoujinName@HoujinBangou_3

Anonymized Network Data

https://www.docodoco.jp/data/marketplace/anonymous-network/

| docodoco ipfield=ip | fields Name@AnonymousNetwork_5 Score@AnonymousNetwork_5 Info@AnonymousNetwork_5

Weather

https://www.docodoco.jp/data/marketplace/weather-data/

In the case of Weather forecast ,Temperature forecast,Chance of rain or Wind direction forecast ,"WeatherA"
In the case of Current weather situation or Ultraviolet forecast ,"WeatherP"

| docodoco ipfield=ip | fields TodayWeather@WeatherA Weather@WeatherP

Restrictions

  • It is required to sign up with DocoDoco and get an API key.
  • Internet access is essential for requesting DocoDoco.
  • Response speed is 1000IP per minute for 10 parallel requests with CPU 6 core. (It varies according to internet environments)

Release Notes

Version 1.0.1
Dec. 26, 2024
Version 1.0.0
Oct. 28, 2024

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk LLC in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.