Splunk Dev

How can I get state/city when I already have lon/lat in my event?

daniel333
Builder

All,

So normally with iplocation and geostat I can lookup State, City etc for heatmaps. How ever with the log I have now I don't have the IP. How ever the log does have long/lat in it already. Anyway to do iplocation info backwards?

Tags (1)
0 Karma

somesoni2
Revered Legend

I don't think you can extract IP using the long/lat values. If you want to use geostats type of aggregation, you should be able to do this

your current search | geostats latfield=lat longfield=long count by dest
0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...