How to get Country and City from latitude and longitude logs

[herguzav]

Hi frends

I have logs like

_time=time latitude=1 longitude=-1 other fields ...

_time=time latitude=1 longitude=-2 other fields ...

Etc

The objective is to translate the latitude and longitude values ​​to their associated countries and then apply

filters on these values ​​but I only have these values.

Hope can help me.

Regards

[richgalloway · Accepted solution]

Splunk has a built-in lookup table for converting lat/long into country name.

| lookup geo_countries latitude longitude OUTPUT featureId as country