All Apps and Add-ons
Highlighted

Can I use iplocation with an ip address I get from a dbxquery?

New Member

Can I use iplocation with an ip address I get from a dbxquery?

0 Karma
Highlighted

Re: Can I use iplocation with an ip address I get from a dbxquery?

Influencer

Yes. As long as you have a field that contains an ip address, I see no reason why we care where it came from.

0 Karma
Highlighted

Re: Can I use iplocation with an ip address I get from a dbxquery?

New Member

iplocation does work by itself but not with geostats

0 Karma
Highlighted

Re: Can I use iplocation with an ip address I get from a dbxquery?

Influencer

Share your search example and/or screenshot?
Do you have latitude/longitude fields in your events after using iplocation?

0 Karma
Highlighted

Re: Can I use iplocation with an ip address I get from a dbxquery?

New Member

I don't have the lat/lon fields in my events and I can't attach a screenshot so here is my search:

|dbxquery connection=db.connection query="select remoteaddr from table" shortnames = t
|iplocation = remotaddr
|geostats latfield=lat longfield=lon globallimit=0

No results found.

0 Karma
Highlighted

Re: Can I use iplocation with an ip address I get from a dbxquery?

Influencer

Do you get any events without specifying the | geostats command and do those events have the fields "lat" and "lon" that you specified for geostats?

0 Karma
Highlighted

Re: Can I use iplocation with an ip address I get from a dbxquery?

New Member

I get stats without specifying the geostats command

0 Karma
Highlighted

Re: Can I use iplocation with an ip address I get from a dbxquery?

Influencer

and do those events have the fields "lat" and "lon" that you specified for geostats?

0 Karma
Highlighted

Re: Can I use iplocation with an ip address I get from a dbxquery?

Influencer

Looking at your search again, I see that you have multiple typos in there.
It should be | iplocation remoteaddr instead of |iplocation = remotaddr (no equals sign and properly spelled field name).

I just tried this and it works just fine:

| makeresults | eval remoteaddr="50.26.126.246" | iplocation remoteaddr | geostats latfield=lat longfield=lon

Please ensure you are using the correct syntax and try again.

0 Karma
Highlighted

Re: Can I use iplocation with an ip address I get from a dbxquery?

New Member

Can you test using dbxquery? I get the same results with the "iplocation remoteaddr" syntax. I get nearly 12k worth of stats but no latitude or longitude when I add "| geostats latfield=lat longfield=lon"

0 Karma