Synopsis

This display function A display function that groups result events according to the extracted elements of the IP address in one or more of its geoip columns,.

...

For each event that has the specified IP_address_column_name with an IP address value, extracts the country name, country code, city, and/or region from the IP address, using the hostip.info an internal database, and then displays shows the number of events according result of performing a specific function on the search result events, according to the country name, country code, city, and/or region, as required.

...