Geo lookup on "data.ip OR ip"

Comments

2 comments

  • Avatar
    Julien Bernard

    Dear Mark,

    The easiest may be to select which field is available first, then apply the GeoIP on the result (the field ip_merge will either contain the value of ip field if not empty, or the value of data.ip if it's empty):

    | if (IsEmpty(ip), %"data.ip", ip) as ip_merged
    | geoip ip_merged
    1
    Comment actions Permalink
  • Avatar
    Mark Drummond

    That worked, thanks!

    0
    Comment actions Permalink

Please sign in to leave a comment.