Hi @indeed_2000,
are you speaking of georeferencing?
If this is your requirement, you need of a lookup like MaxMind (https://splunkbase.splunk.com/app/3022/#/details) to join a city name to latitude and longitude.
If instead you want to create you own lookup, follow the instructions at https://docs.splunk.com/Documentation/Splunk/latest/Viz/CreateLookup or https://docs.splunk.com/Documentation/Splunk/8.2.6/Knowledge/Configuregeospatiallookups
Ciao.
Giuseppe
@gcusello MaxMind work if i don’t have ip?
other links seems complicated, do you have link or user guide that show step by step that how can i do this?
Thanks
Hi @indeed_2000,
in maxmind you also have the country and the name of the city that you can use to find lat and long of your city to use in a map visualization.
Obviously you cannot use iplocation command, but you have to use the lookuyp command to associate the city name with coordinates.
Ciao.
Giuseppe