All Apps and Add-ons

How to convert an IP address to lat and long and to use the Missile Map?

dannili
Communicator

Hi all, I'm using the Missile Map app in Splunk to visualize multiple connections from staring point to destination. But I have trouble converting my two fields FromIPAddr and ToIPAddr, which are in IP address format, to four required fields in Missile Map start_lat| start_lon |end_lat |end_lon

Missile Map reference:
https://splunkbase.splunk.com/app/3511/#/details

Does anyone know how to do that? Thanks!

*******************************QUESTION UPDATE***************************************
Only need to use iplocation to extract the IP address and then rename them to corresponding fields to be used in missile map display

0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi dannili,

you can use the iplocation SPL command for that. Find everything about it here http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Iplocation as well as some examples.

Hope this helps ...

cheers, MuS

View solution in original post

MuS
SplunkTrust
SplunkTrust

Hi dannili,

you can use the iplocation SPL command for that. Find everything about it here http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Iplocation as well as some examples.

Hope this helps ...

cheers, MuS

dannili
Communicator

Thanks for your response! I wasn't sure whether the iplocation can be used twice but it worked really well.

0 Karma
Get Updates on the Splunk Community!

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...