Solved: How to display iplocation info for all values in t... - Splunk
https://community.splunk.com/t5/Splunk-Search/How-to-display-iplocation-info-for-all-values-in-the-IP-address/m-p/218732
Jun 23, 2016 · index=abc | stats values(src_ip) by username | where username!="xyz" | iplocation values(ipaddress) But the problem is that if a username has more than 1 IP address associated with it, it is skipped over in iplocation, that is, we have no resolution for IP to location mapping in those instances.
DA: 95 PA: 41 MOZ Rank: 99