Check the addon ASN Lookup Generator https://splunkbase.splunk.com/app/3531 First  | asngen | table ip asn autonomous_system | outputlookup asn And then  source="yourdata" | iplocation youriptable | table youriptable, City, Country | lookup asn ip AS IPaddress ... View more