All Apps and Add-ons

geoip: any way to group by continent?

NK_1
Path Finder

Maybe a feature request:

How about a

... | geoip ip | stats count by ip_continent_name

Where continent_name = Asia, Europe, ... etc.

Thanks!

0 Karma

gkanapathy
Splunk Employee
Splunk Employee

You can certainly create a simple lookup to map the country to the continent. I suppose you might have to create one that takes cit into account, if you need to distinguish between countries that span more than one continent.

.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!