How to show device location on MAP

[vikas_gopal]

Hi Experts,
I am new to this please suggest how I can achieve it, I have firewall device data in CEF format which has device name , IP and location like "USA/Los Angeles", "India/Delhi" etc. I want to show the device location on MAP.

Thanks
VG

[kdsex · Accepted solution]

you can use this add-on app (world city info)

https://apps.splunk.com/app/1926/

if your CEF data contain a column/fields of city names, you can use it to get the longitude and latitude of that city ,at last use the geostats command to show full location map that include your devicename

[kdsex]

if you have integrated deviceIP-devicename data ，you also can use the commnd “ iplocation”

[vikas_gopal]

Thanks , that sounds Interesting will start with the first option i.e add-on

[bidahor13]

Is there a version for Splunk 6.4?

[MuS]

Splunk 6.4??