To which source the _geo field belongs to??

shri_27 · ‎02-22-2013

Hi All,
Please let me know to which source or sourcetype the _geo field belongs to? I want this for second search query to achieve google map Drill down. Or any other suggestions to achive the Drill down in Google Map??

Ayn · ‎02-23-2013

It is usually created by the geoip lookup, see the documentation that actually comes with the Google Maps app: http://splunk-base.splunk.com/apps/22365/google-maps

To which source the _geo field belongs to??

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Data Management Digest – September 2026

Federated Search for CloudWatch Unified Data Store Is Generally Available

Announcing Modern Navigation: A New Era of Splunk User Experience

Join the Conversation

To which source the _geo field belongs to??

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Data Management Digest – September 2026

Federated Search for CloudWatch Unified Data Store Is Generally Available

Announcing Modern Navigation: A New Era of Splunk User Experience