Getting Data In

How to geo map participants IP addresses

splunkuseradmin
Path Finder

Hey all,

So, I need a geo map: locations (IP address) using ip address and when I try to use
"........| iplocation IPAddress" then no Country or City fields appear.
The data is getting extracted in a .CSV using a python script and .CSV file has only above mentioned fields.
So my question is:
Do I need to have country and city fields also in .csv or we can obtain locations just using ipaddress?

thanks

1 Solution

VatsalJagani
Super Champion

Hello @splunkuseradmin,

This query should work. If not please check field name and ip-address values once.

| iplocation IPAddress
| geostats latfield=lat longfield=lon count

Hope this helps!!!

View solution in original post

renjith_nair
SplunkTrust
SplunkTrust

@splunkuseradmin,

Try this and select cluster map as visualization

your current search | iplocation IPAddress|geostats latfield=lat longfield=lon count by IPAddress
Happy Splunking!

VatsalJagani
Super Champion

Hello @splunkuseradmin,

This query should work. If not please check field name and ip-address values once.

| iplocation IPAddress
| geostats latfield=lat longfield=lon count

Hope this helps!!!

splunkuseradmin
Path Finder

Oops! my bad I was trying the same, what you guys suggesting but the mistake was in the field Ipaddress name correct field name is is "IP Address".
anyways you gave me the right answer thogh i check this one.

0 Karma
Get Updates on the Splunk Community!

Don't wait! Accept the Mission Possible: Splunk Adoption Challenge Now and Win ...

Attention everyone! We have exciting news to share! We are recruiting new members for the Mission Possible: ...

Unify Your SecOps with Splunk Mission Control

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission ...

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...