Geolocation Query Functions

LogScale's Geolocation related functions format or convert geographical data points.

Table: Event & Geolocation Query Functions

FunctionDefault ArgumentAvailabilityDescription
geography:distance([as], lat1, lat2, lon1, lon2)   Calculates the distance between two geographical coordinates along an ideal earth surface
geohash([as], [lat], [lon], [precision])   Calculates a geohash value given two fields representing latitude and longitude.
ioc:lookup([confidenceThreshold], field, [include], [prefix], [strict], type)field  Look up IOCs (indicators of compromise).
ipLocation([as], [field])field  Determines country, city, longitude, and latitude for given IP address.