Load more IoC data

---
title: Load more IoC data
description: Depending on settings in two properties and a script include definition, you can load geolocation information for IP addresses and websites in the Observables form. With further customization, you can also add other information, such as country codes, city names.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/t\_LoadAdditionalIoCData.html
release: brazil
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Observables, IoC Repository, Threat Intelligence, Enterprise security case management applications, Security Operations]
---

# Load more IoC data

Depending on settings in two properties and a script include definition, you can load geolocation information for IP addresses and websites in the Observables form. With further customization, you can also add other information, such as country codes, city names.

## Before you begin

The following two properties must be set:

-   **The domain name to retrieve additional information for IP addresses/URLs** \[sn\_ti.ip\_lookup.web\_site\]
-   **The API key to be used for the above domain, if any** \[sn\_ti.ip\_lookup.api\_key\]

Role required: sn\_ti.admin

## Procedure

1.  Navigate to **All** > **Threat Intelligence** > **IoC Repository** > **Observables**.

2.  Click the IP address or URL of the observable to which you want to view more IoC data.

    The **Location** field shows the geolocation of the IoC.

3.  Click the **Enrich data** button to load the additional IoC data.

4.  You can also configure the Observable form to add other location-related fields, such as the country code and city code.

    **Note:** To load more location-related information, edit the **ThreatAdditionalInfo** script include and provide the appropriate API key from the website that provides the additional information.


**Parent Topic:**[Observables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/c_Observables.md)

**Related topics**  


[Define an observable]()

[Add a related IoC to an observable]()

[Add associated tasks to an observable]()

[Add a related observable]()

[Identify observable sources]()

[Perform lookups on observables]()

[Perform threat enrichment on observables]()