All Apps and Add-ons

How to convert an IP address to lat and long and to use the Missile Map?

dannili
Communicator

Hi all, I'm using the Missile Map app in Splunk to visualize multiple connections from staring point to destination. But I have trouble converting my two fields FromIPAddr and ToIPAddr, which are in IP address format, to four required fields in Missile Map start_lat| start_lon |end_lat |end_lon

Missile Map reference:
https://splunkbase.splunk.com/app/3511/#/details

Does anyone know how to do that? Thanks!

*******************************QUESTION UPDATE***************************************
Only need to use iplocation to extract the IP address and then rename them to corresponding fields to be used in missile map display

0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi dannili,

you can use the iplocation SPL command for that. Find everything about it here http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Iplocation as well as some examples.

Hope this helps ...

cheers, MuS

View solution in original post

MuS
SplunkTrust
SplunkTrust

Hi dannili,

you can use the iplocation SPL command for that. Find everything about it here http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Iplocation as well as some examples.

Hope this helps ...

cheers, MuS

dannili
Communicator

Thanks for your response! I wasn't sure whether the iplocation can be used twice but it worked really well.

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...