Hi
I am visualizing in a map private ip addresses.
I created a lookup table which looks like this:
ip iprange iprangeLatitude iprangeLongitude iprangeProvince
10.xx.y.1 10.xx.y.0/zz 53.749997 -71.9833294 Quebec
10.xx.y.2 10.xx.y.0/zz 53.749997 -71.9833294 Quebec
10.xx.y.3 10.xx.y.0/zz 53.749997 -71.9833294 Quebec
But I have more than 1000 ips (mobile, vpn, etc). So is there a way to make a lookup with only the iprange instead of writing all the ips?
index=network srcip=10.xx.y.0/zz
| stats count by srcip
| lookup ipranges_lookup ip as srcip
| geostats latfield=iprangeLatitude longfield=iprangeLongitude count by srcip
![alt text][1]
[1]: /storage/temp/275887-capture.png
↧