Splunk Search

How to show device location on MAP

Builder

Hi Experts,
I am new to this please suggest how I can achieve it, I have firewall device data in CEF format which has device name , IP and location like "USA/Los Angeles", "India/Delhi" etc. I want to show the device location on MAP.

Thanks
VG

Tags (1)
0 Karma
1 Solution

Engager

you can use this add-on app (world city info)

https://apps.splunk.com/app/1926/

if your CEF data contain a column/fields of city names, you can use it to get the longitude and latitude of that city ,at last use the geostats command to show full location map that include your devicename

View solution in original post

Engager

you can use this add-on app (world city info)

https://apps.splunk.com/app/1926/

if your CEF data contain a column/fields of city names, you can use it to get the longitude and latitude of that city ,at last use the geostats command to show full location map that include your devicename

View solution in original post

Engager

if you have integrated deviceIP-devicename data ,you also can use the commnd “ iplocation”

0 Karma

Builder

Thanks , that sounds Interesting will start with the first option i.e add-on

0 Karma

Path Finder

Is there a version for Splunk 6.4?

0 Karma

SplunkTrust
SplunkTrust

Splunk 6.4??

0 Karma