topic Re: splunk maps plotting using IP address in Dashboards & Visualizations

splunk maps plotting using IP address

sushmitha_mj — Tue, 12 May 2015 16:56:24 GMT

Can maps be plotted using IP address instead of coordinates?
How can I use the IP address to plot a location in a map?

Re: splunk maps plotting using IP address

krish3 — Tue, 12 May 2015 18:23:05 GMT

Yes you can try using iplocation command.

your search query |iplocation IPaddress_fieldname

For more details go through the search reference manual here.

Re: splunk maps plotting using IP address

aljohnson_splun — Tue, 12 May 2015 18:26:49 GMT

As Krish3 mentioned, you're going to want to use iplocation most likely, and after that, geostats, e.g.:

... | iplocation clientip | geostats count by Country

Re: splunk maps plotting using IP address

mporath_splunk — Mon, 28 Sep 2015 20:54:18 GMT

Above answer is the preferred approach for 6.2 and below.

The new Splunk 6.3 introduced Choropleth Maps as a new visualization type. The new release ships with a geospatial lookup that contains all countries of the world as polygons to show on a map.

Find more information on Choropleth Maps in the Splunk Docs for 6.3.

Re: splunk maps plotting using IP address

simon_lavigne — Mon, 04 Apr 2016 00:58:09 GMT

I downvoted this post because no attempt to answer the original posters question.

Re: splunk maps plotting using IP address

bworrellZP — Mon, 23 May 2016 17:07:42 GMT

I downvoted this post because did not give an example of how to create a choropleth map based on the original posters question