https://community.splunk.com/t5/Splunk-Search/Custom-iplocation/m-p/460037#M129788 <P>Hi pjohnson1,<BR /> Yes, you have to create your own lookup containing the same information of the external addresses:</P> <UL> <LI>IP range,</LI> <LI>latitude,</LI> <LI>longitude,</LI> <LI>city,</LI> </UL> <P>then you can add all the information you like, related to that location.</P> <P>So you can call this lookup as a normal one using the IP address as a key.</P> <P>Only one hint: put attention to the field names you use, it's easier to use the same of external addresses. </P> <P>Ciao.<BR /> Giuseppe</P> Mon, 14 Oct 2019 11:17:46 GMT gcusello 2019-10-14T11:17:46Z https://community.splunk.com/t5/Splunk-Search/Custom-iplocation/m-p/460036#M129787 <P>We are currently the implication command to external IP addresses and it works great.</P> <P>Is it possible to create a custom iplocation type lookup for sets of internal/corp IP ranges that we define too lookup cities and countries?</P> Mon, 14 Oct 2019 10:49:13 GMT https://community.splunk.com/t5/Splunk-Search/Custom-iplocation/m-p/460036#M129787 pjohnson1 2019-10-14T10:49:13Z https://community.splunk.com/t5/Splunk-Search/Custom-iplocation/m-p/460037#M129788 <P>Hi pjohnson1,<BR /> Yes, you have to create your own lookup containing the same information of the external addresses:</P> <UL> <LI>IP range,</LI> <LI>latitude,</LI> <LI>longitude,</LI> <LI>city,</LI> </UL> <P>then you can add all the information you like, related to that location.</P> <P>So you can call this lookup as a normal one using the IP address as a key.</P> <P>Only one hint: put attention to the field names you use, it's easier to use the same of external addresses. </P> <P>Ciao.<BR /> Giuseppe</P> Mon, 14 Oct 2019 11:17:46 GMT https://community.splunk.com/t5/Splunk-Search/Custom-iplocation/m-p/460037#M129788 gcusello 2019-10-14T11:17:46Z