Hi Nasimjon,
Kql doesn’t have geo lookup built in, so you have to provide the geo mappings.
Here’s an example that was provided to me thanks to some clever Microsoft guys that frequent this forum.
Make GEOIP Location based from AzureDiagnostics data

Nasimjon Tohirov
261
Reputation points
Hello folks,
One thing I would be to know. I have log query which get from AzureDiagnostics. There has too much interesting info, such as clientIP_s. Based on this kind of info (clientIP_s), can I make GEOIP location (ISP check or analog whois. It's rude, of course. ))))? Can this be done somehow?
Thanks on advance.
Regards,
Nasimjon
Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,658 questions
Accepted answer
-
David Broggy 6,371 Reputation points MVP Volunteer Moderator
2022-07-28T08:53:22.413+00:00