Synopsis
Displays the city of the city names extracted from the IP address in the specified IP columncolumn in the search result events.
Syntax
city <IP[IP_address_column_name>name]
Required Arguments
IP_address_column_name
...
For each event that has the specified IP_address_column_name with an IP address value, extracts the city name from the IP address, using the hostip.info database.using an internal database.
Examples
Example
...
1:
* log...access | city IPaddress1
For each event in log access, extracts the city name from the IP address in column IPaddress1.