All Apps and Add-ons

Google map using ip local map to coordinate

susanto_andi81
New Member

Hi, I want to map internal IP ranges (10.0.0.0/24, 192.168.0.0/16 etc.) to geo coordinates.

For example if my client ip is 192.168.75.2, it may lookup to some coordinates (lat or longitude).

Is it possible? and how? thanks

0 Karma
1 Solution

southeringtonp
Motivator

Yes, it's possible.

You just need to populate the contents of the _lat and _lng fields used by the Google Maps app. You can use a lookup to populate the fields.

You can populate those fields with a scripted lookup under 4.1, or Splunk 4.2 allows CIDR in CSV-based lookups .

View solution in original post

southeringtonp
Motivator

Yes, it's possible.

You just need to populate the contents of the _lat and _lng fields used by the Google Maps app. You can use a lookup to populate the fields.

You can populate those fields with a scripted lookup under 4.1, or Splunk 4.2 allows CIDR in CSV-based lookups .

ziegfried
Influencer

Please note that as of Google Maps 1.1 this has changed. A single field _geo containing both the latitude and the longitude separated by a comma is now used as location information.

0 Karma

southeringtonp
Motivator

Not at present. It's been requested before. I believe that ziegfried was working on that at one point, but you might be better off asking this as a separate question.

0 Karma

susanto_andi81
New Member

It works!..

Thanks a lot.

By the way, in google map, can we drill down the event count in the map? (click the number in the map and then direct to search that event). I try it but cannot.

Thx

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...