Enrichment and detection setting (global). This setting applies to every sensor. For conventions, abbreviations, and the other sections, see the Administration configuration reference.
Where: Administration → Configuration → Enrichment and detection settings → IP enrichment
Add geographic and network owner data to Internet Protocol (IP) addresses in alerts and flows.
Setting | What it does | Default | Allowed values | Notes |
|---|---|---|---|---|
Enabled | Enable the IP enrichment service. | On | on/off | — |
Data Path | Directory containing the IP2Location databases (GeoIP DB11 + LITE-ASN .BIN files). |
| text | Restart needed |
Default Home Net | Fallback CIDR ranges treated as internal/'home' networks by this service when the originating sensor has no per-sensor |
| list of string | Restart needed |
Related: C2 and threat intelligence
Back to the Administration configuration reference.