We are excited to announce a new function in KQL: geo_info_from_ip_address().
This function allows you to retrieve geolocation information about IPv4 or IPv6 addresses, such as country, state, city, and coordinates. This can help you enrich your data analysis with geographic context, such as identifying the origin of network traffic, the location of users or devices, or the distribution of events across regions. The function uses GeoLite2 data created by MaxMind, a leading provider of IP intelligence and online fraud prevention tools.
We hope you find this function useful and we welcome your feedback and suggestions. You can find more details and examples of the function in the KQL documentation. Happy querying!
