Hi Team,
I need to know how to solve the enrichment issue in google chronicle siem as i am finding some issue lately where chronicle wrongly categorized IP location which was US to Iran and there are other instances as well where there is issue with the geo based enrichments in terms of location and IP.
Question
Google Chronicle Enrichment Issues
+7- Bronze 2
Google SecOps SIEM uses a Google proprietary method for IP resolution based on who is using the IP over where it is, but you can however provide feedback as follows:
Google proprietary IP geolocation technology uses a combination of networking data and other inputs and methods to provide IP address location and network resolution for users. Other organizations might use different signals or methods, which might occasionally lead to different results.
If you experience an inconsistency in IP geolocation results that Google provides, open a customer support case so that Google can investigate and, if appropriate, correct its records
Alternatively, you can disable IP Geo enrichment with Enrichment Block controls.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.