Synopsis

Displays the city extracted city names extracted from the IP address in the specified IP columncolumn in the search result events.

Syntax

city [IP_address_column_name]

...

For each event that has the specified IP_address_column_name with an IP address value, extracts the city name from the IP address, using the hostip.info databaseusing an internal database.

Examples

Example 1:  

* log.access | city IPaddress1

 For all events  For each event in log access, extracts the city from name from the IP address in column IPaddress1.