This page explains how to use the geo_info_from_ip_address function in APL.
geo_info_from_ip_address
function in APL retrieves geographic information based on an IP address. It maps an IP address to attributes such as city, region, and country, allowing you to perform location-based analytics on your datasets. This function is particularly useful for analyzing web logs, security events, and telemetry data to uncover geographic trends or detect anomalies based on location.
Splunk SPL users
geo_info_from_ip_address
performs the resolution natively within the query, streamlining the workflow.ANSI SQL users
geo_info_from_ip_address
function directly provides geographic details, simplifying the query process.Parameter | Type | Description |
---|---|---|
ip_address | string | The IP address for which to retrieve geographic information. |
Name | Type | Description |
---|---|---|
country | string | Country name |
state | string | State (subdivision) name |
city | string | City name |
latitude | real | Latitude coordinate |
longitude | real | Longitude coordinate |
country_iso | string | ISO code of the country |
time_zone | string | Time zone in which the IP address is located |
172.217.22.14
.