https://community.splunk.com/t5/Splunk-Enterprise/help-on-custom-cluster-map/m-p/583365#M11396 <P>yes you are right</P><P>So if i well understand it's not possible to display the results on the map one shot?</P><P>last thing, I have you an idea for the site which have a different name between splunk and the lookup?</P> Wed, 02 Feb 2022 11:02:04 GMT jip31 2022-02-02T11:02:04Z https://community.splunk.com/t5/Splunk-Enterprise/help-on-custom-cluster-map/m-p/583339#M11392 <P>hi</P><P>I use the search below in order to display the number of events corresponding to my main search on a cluster map</P><P>There is a gap between the results displayed on my map and the results of the main search</P><P>I have identified a first problem</P><P>Some sites between the lookup and splunk are a little bit differents</P><P>For example, I have a site calle "LA BA" in Splunk and "LA BAUME" in the csv</P><P>So what I have to do that the sites match well?</P><P>&nbsp;</P><LI-CODE lang="markup">index=toto sourcetype=tutu | stats dc(id) as nbincid by site | where isnotnull(site) | join type=left site [| inputlookup Bp.csv | rename siteName as site | fields site latitude longitude ] | table site nbincid latitude longitude | geostats latfield=latitude longfield=longitude globallimit=0 values(nbincid)</LI-CODE><P>&nbsp;</P><P>&nbsp;</P> Wed, 02 Feb 2022 09:48:14 GMT https://community.splunk.com/t5/Splunk-Enterprise/help-on-custom-cluster-map/m-p/583339#M11392 jip31 2022-02-02T09:48:14Z https://community.splunk.com/t5/Splunk-Enterprise/help-on-custom-cluster-map/m-p/583343#M11393 <P>The marker size you set on the cluster map will group locations that falls within that radius together.</P> Wed, 02 Feb 2022 09:01:52 GMT https://community.splunk.com/t5/Splunk-Enterprise/help-on-custom-cluster-map/m-p/583343#M11393 johnhuang 2022-02-02T09:01:52Z https://community.splunk.com/t5/Splunk-Enterprise/help-on-custom-cluster-map/m-p/583365#M11396 <P>yes you are right</P><P>So if i well understand it's not possible to display the results on the map one shot?</P><P>last thing, I have you an idea for the site which have a different name between splunk and the lookup?</P> Wed, 02 Feb 2022 11:02:04 GMT https://community.splunk.com/t5/Splunk-Enterprise/help-on-custom-cluster-map/m-p/583365#M11396 jip31 2022-02-02T11:02:04Z