Displays the country names extracted from the IP address column in the search result events.
Syntax: <character string>
Description: The name of the column header that has IP address values.
For each event that has the specified IP_address_column_name with an IP address value, extracts the country name from the IP address, using an internal database.
* log.access | country IPaddress1
For each event in log access, extracts the country name from the IP address in column IPaddress1.