[FEATURE]Add iplocation
function to PPL for IP address geolocation
#3038
Labels
iplocation
function to PPL for IP address geolocation
#3038
Description:
We propose adding an
geoip
function to OpenSearch's Piped Processing Language (PPL) and SQL to provide built-in IP address geolocation capabilities.This feature would be similar to functionality used in OpenSearch's geospatial feature, enhancing PPL's ability to enrich log data with geographical information based on IP addresses.
Proposed Functionality:
Example Usage:
... | eval geolocation = geoip(ip_field)
This would add a new field 'geolocation' with all available location information for the IP address in 'ip_field'.
This would add new fields with specific geolocation information.
This would add a new field 'location_info' with multiple pieces of geolocation data.
Additional considerations
geospatial
opensearch plugin for the ip to geo resolvingRelated resources
The text was updated successfully, but these errors were encountered: