Displays the city names extracted from the IP address column in the search result events.
Syntax: <character string>
Description: The name of the column header that has IP address values.
For each event that has the specified IP_address_column_name with an IP address value, extracts the city name from the IP address, using an internal database.
* log.access | city IPaddress1
For each event in log access, extracts the city name from the IP address in column IPaddress1.