city
Synopsis
Displays the city names extracted from the IP address column in the search result events.
Syntax
city [IP_address_column_name]
Required Arguments
IP_address_column_name
Syntax: <character string>
Description: The name of the column header that has IP address values.
Optional Arguments
None
Description
For each event that has the specified IP_address_column_name with an IP address value, extracts the city name from the IP address, using an internal database.
Examples
Example 1:Â Â
* log.access | city IPaddress1
 For each event in log access, extracts the city name from the IP address in column IPaddress1.