topic Re: How to geo map participants IP addresses in Getting Data In

How to geo map participants IP addresses

splunkuseradmin — Mon, 24 Jun 2019 22:35:32 GMT

Hey all,

So, I need a geo map: locations (IP address) using ip address and when I try to use
"........| iplocation IPAddress" then no Country or City fields appear.
The data is getting extracted in a .CSV using a python script and .CSV file has only above mentioned fields.
So my question is:
Do I need to have country and city fields also in .csv or we can obtain locations just using ipaddress?

thanks

Re: How to geo map participants IP addresses

VatsalJagani — Tue, 25 Jun 2019 04:07:05 GMT

Hello @splunkuseradmin,

This query should work. If not please check field name and ip-address values once.

| iplocation IPAddress
| geostats latfield=lat longfield=lon count

Hope this helps!!!

Re: How to geo map participants IP addresses

renjith_nair — Tue, 25 Jun 2019 04:17:06 GMT

@splunkuseradmin,

Try this and select cluster map as visualization

your current search | iplocation IPAddress|geostats latfield=lat longfield=lon count by IPAddress

Re: How to geo map participants IP addresses

splunkuseradmin — Tue, 25 Jun 2019 16:39:04 GMT

Oops! my bad I was trying the same, what you guys suggesting but the mistake was in the field Ipaddress name correct field name is is "IP Address".
anyways you gave me the right answer thogh i check this one.