While extracting fields, now I see another option says Perform IPviking for said index. So we can make a correctional for performing same?
IPviking was part of the splunk "Norse Threat Intel" app. This app is no longer available.
you need to provide a LOT more information here--what app are you using? where are you when you see this option?
I am not using any app, while clicking on Event Action option in any of log its shows perform IPviking for ...
IPviking is not a default splunk Event Action so you must be using an app. If you're not sure I would ask your Splunk Administrator. Additionally I am not sure what you mean by: "make a correctional for performing same? "
