geo location based on IP

Comments

1 comment

  • Avatar
    Don Gothing

    Hi Kota,

    Here's an article about this exact kind of application. This is the query that should separate out the ip addresses and enable mapping once you enter your search criteria.


    | parse regex "(?<ip_address>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})" multi
    | lookup latitude, longitude, country_code, country_name, region, city, postal_code from geo://location on ip = ip_address
    | count by latitude, longitude, country_code, country_name, region, city, postal_code
    | sort _count


    After running the query click the map icon on the Aggregates pane.

    0
    Comment actions Permalink

Please sign in to leave a comment.