https://community.splunk.com/t5/Splunk-Search/Search-query-that-filters-results-by-geolocation/m-p/305111#M165632 <P>Simply put i index a logon log to one of our services. I would like to create a table that would show me results based on geolocation, i.e. in this case, all connections made from IP addresses outside of north america. Is this possible on Splunk Cloud?</P> <P>Thanks!</P> Thu, 12 Oct 2017 16:28:52 GMT ptur 2017-10-12T16:28:52Z https://community.splunk.com/t5/Splunk-Search/Search-query-that-filters-results-by-geolocation/m-p/305111#M165632 <P>Simply put i index a logon log to one of our services. I would like to create a table that would show me results based on geolocation, i.e. in this case, all connections made from IP addresses outside of north america. Is this possible on Splunk Cloud?</P> <P>Thanks!</P> Thu, 12 Oct 2017 16:28:52 GMT https://community.splunk.com/t5/Splunk-Search/Search-query-that-filters-results-by-geolocation/m-p/305111#M165632 ptur 2017-10-12T16:28:52Z https://community.splunk.com/t5/Splunk-Search/Search-query-that-filters-results-by-geolocation/m-p/305112#M165633 <P>sourcetype=access_* status&gt;=400 | head 20 | iplocation clientip | table clientip, status, City, Country|where Country !="United States"</P> <P>Splunk has a builtin iplocation that works great.</P> Thu, 12 Oct 2017 17:03:32 GMT https://community.splunk.com/t5/Splunk-Search/Search-query-that-filters-results-by-geolocation/m-p/305112#M165633 mgast 2017-10-12T17:03:32Z https://community.splunk.com/t5/Splunk-Search/Search-query-that-filters-results-by-geolocation/m-p/305113#M165634 <P>thanks! looks great</P> Thu, 12 Oct 2017 18:00:12 GMT https://community.splunk.com/t5/Splunk-Search/Search-query-that-filters-results-by-geolocation/m-p/305113#M165634 ptur 2017-10-12T18:00:12Z