Refine your search:

Hi, I want to map internal IP ranges (10.0.0.0/24, 192.168.0.0/16 etc.) to geo coordinates.

For example if my client ip is 192.168.75.2, it may lookup to some coordinates (lat or longitude).

Is it possible? and how? thanks

asked 29 Apr '11, 03:16

susanto_andi81's gravatar image

susanto_andi81
01
accept rate: 0%


One Answer:

Yes, it's possible.

You just need to populate the contents of the _lat and _lng fields used by the Google Maps app. You can use a lookup to populate the fields.

You can populate those fields with a scripted lookup under 4.1, or Splunk 4.2 allows CIDR in CSV-based lookups .

link

answered 29 Apr '11, 07:15

southeringtonp's gravatar image

southeringtonp ♦
4.5k1215
accept rate: 35%

It works!..

Thanks a lot.

By the way, in google map, can we drill down the event count in the map? (click the number in the map and then direct to search that event). I try it but cannot.

Thx

(03 May '11, 06:24) susanto_andi81

Not at present. It's been requested before. I believe that ziegfried was working on that at one point, but you might be better off asking this as a separate question.

(03 May '11, 08:01) southeringtonp ♦

Please note that as of Google Maps 1.1 this has changed. A single field _geo containing both the latitude and the longitude separated by a comma is now used as location information.

(16 Jun '11, 08:02) ziegfried ♦
Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×28
×21
×14
×7

Asked: 29 Apr '11, 03:16

Seen: 1,291 times

Last updated: 13 Nov '11, 08:11

Copyright © 2005-2012 Splunk, Inc. All rights reserved.