Displays the country codes extracted from the IP address column in the search result events.
country code [IP_address_column_name]
Syntax: <character string>
Description: The name of the column header that has IP address values.
For each event that has the specified IP_address_column_name with an IP address value, extracts the country code from the IP address, using an internal database.
* log.access | country code IPaddress1
For each event in log access, extracts the country code from the IP address in column IPaddress1.