All Apps and Add-ons

How to convert an IP address to lat and long and to use the Missile Map?

dannili
Communicator

Hi all, I'm using the Missile Map app in Splunk to visualize multiple connections from staring point to destination. But I have trouble converting my two fields FromIPAddr and ToIPAddr, which are in IP address format, to four required fields in Missile Map start_lat| start_lon |end_lat |end_lon

Missile Map reference:
https://splunkbase.splunk.com/app/3511/#/details

Does anyone know how to do that? Thanks!

*******************************QUESTION UPDATE***************************************
Only need to use iplocation to extract the IP address and then rename them to corresponding fields to be used in missile map display

0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi dannili,

you can use the iplocation SPL command for that. Find everything about it here http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Iplocation as well as some examples.

Hope this helps ...

cheers, MuS

View solution in original post

MuS
SplunkTrust
SplunkTrust

Hi dannili,

you can use the iplocation SPL command for that. Find everything about it here http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Iplocation as well as some examples.

Hope this helps ...

cheers, MuS

dannili
Communicator

Thanks for your response! I wasn't sure whether the iplocation can be used twice but it worked really well.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Using the Splunk Threat Research Team’s Latest Security Content

REGISTER HERE Tech Talk | Security Edition Did you know the Splunk Threat Research Team regularly releases ...

SplunkTrust | 2024 SplunkTrust Application Period is Open!

It's that time again, folks! That's right, the application/nomination period for the 2024 SplunkTrust is ...