Distribution of source IP addresses from NGINX logs

Keyword

Distribution of source IP addresses

correlation function

count,ip_to_province

Use the ip_to_province function to obtain the provinces based on the IP addresses, use the group by clause to aggregate the provinces, and then use the count function to calculate the number of requests from each province. The results are displayed on a map. You can move the pointer over a province on the map to view the number of requests from the specified province.

* |
select
  count(1) as c,
  ip_to_province(remote_addr) as address
group by
  address
limit
  100