lookup_ip_info

Type of operation: Join

Description

Using a value or column of type IPv4, look up corresponding fields associated with the IP address.

The verb lookup_ip_info behaves similarly to the verb lookup, except rather than retrieving information from another dataset, it retrieves information from a virtual dataset called @ip_info. The currently available field in @ip_info is the JSON object column called geo. This column contains several fields.

The column geo contains the following fields:

Name	Type
city	string
region	string
country	string
latitude	float64
longitude	float64
postal_code	string
timezone	string

Usage

lookup_ip_info ip, columnbinding_1, columnbinding_2, ...

Argument	Type	Optional	Repeatable	Restrictions
ip	ipv4	no	no	none
columnbinding	expression	no	yes	none

Accelerable

lookup_ip_info is always accelerable if the input is accelerable. A dataset that only uses accelerable verbs can be accelerated, making queries on the dataset respond faster.

Examples

lookup_ip_info ipv4('127.0.0.1'), city:@ip_info.geo.city

Look up the city that the IP address ‘127.0.0.1’ is located in and store it in a new column called “city”.

lookup_ip_info ipv4('127.0.0.1'), timezone:@ip_info.geo.timezone, geolocation:@ip_info.geo

Using the IPv4 column “ip”, look up the timezone of the IP address and a JSON object describing the aggregated geolocation information of the IP address, and store this information in new columns called “timezone” and “geolocation”