Dashboards & Visualizations

How reliable is the location value produced by the "iplocation" command?

Path Finder


I need to create a report the will summary the countries that our users connected our network from.

Using the "iplocation" command I got a results, but for sure I can say that I know about an employee connected from a country in Europe but in the logs it appears that he connected from a country in the middle east.

Is there more accurate option to make sure I will present the correct information?


Labels (1)
Tags (1)
0 Karma

Path Finder

Thank you @gcusello 

0 Karma


Hi @yossefn,

the problem isn't how much accurate is the option, it depends on the table used to correlate IP addresses and coordinates (lat and long).

If you want there are some more datailed tables than the ones in Splunk (paying!).

Anyway the problem probably isn't in the table but in the location of the Internet accesses of your organization: maybe a paople is in a site (Middle East) but the access point in in another site (Europe). 



Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out >> As our brave ...