Hi all, I'm using the Missile Map app in Splunk to visualize multiple connections from staring point to destination. But I have trouble converting my two fields FromIPAddr
and ToIPAddr
, which are in IP address format, to four required fields in Missile Map start_lat| start_lon |end_lat |end_lon
Missile Map reference:
https://splunkbase.splunk.com/app/3511/#/details
Does anyone know how to do that? Thanks!
*******************************QUESTION UPDATE***************************************
Only need to use iplocation
to extract the IP address and then rename them to corresponding fields to be used in missile map display
Hi dannili,
you can use the iplocation
SPL command for that. Find everything about it here http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Iplocation as well as some examples.
Hope this helps ...
cheers, MuS
Hi dannili,
you can use the iplocation
SPL command for that. Find everything about it here http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Iplocation as well as some examples.
Hope this helps ...
cheers, MuS
Thanks for your response! I wasn't sure whether the iplocation
can be used twice but it worked really well.