Geo map display US only?


1 comment

  • Avatar
    Kelly Hamm
    Hi Will- you can add a WHERE clause using either the country_code or country_name after the lookup: | count by src_ip | lookup latitude, longitude, country_code, country_name from geo://default on ip = src_ip //| where country_code="US" //option 1 | where country_name="United States" //option 2
    Comment actions Permalink

Please sign in to leave a comment.