To which source the _geo field belongs to??

shri_27 · ‎02-22-2013

Hi All,
Please let me know to which source or sourcetype the _geo field belongs to? I want this for second search query to achieve google map Drill down. Or any other suggestions to achive the Drill down in Google Map??

Ayn · ‎02-23-2013

It is usually created by the geoip lookup, see the documentation that actually comes with the Google Maps app: http://splunk-base.splunk.com/apps/22365/google-maps

To which source the _geo field belongs to??

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

Data Management Digest – August 2026

Join the Conversation

To which source the _geo field belongs to??

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

Data Management Digest – August 2026