Synopsis
Changes the display name and format of specified columns.
Syntax
display [RESULT_COLUMN_NAME] (as [NEW _COLUMN_NAME]) (in [] format) (, [RESULT_COLUMN_NAME] (as [NEW_COLUMN_NAME] )…)
Required Arguments
RESULT_COLUMN_NAME
NEW _COLUMN_NAME
format
Syntax: <character string>
Description: The name of the column header that has IP address values
Optional Arguments
None
Description
For each event that has the specified IP_address_column_name with an IP address value, extracts the city name from the IP address, using the hostip.info database.
Examples
Example 1: ...| city IPaddress1