topic Re: Is there a way to plot 2 or more gps lat long series on the same Map using geostats or any other command / option? I have not found any. in Splunk Dev

Is there a way to plot 2 or more gps lat long series on the same Map using geostats or any other command / option? I have not found any.

abhijitp — Thu, 08 Jun 2017 17:45:31 GMT

Hi,
I need to plot 3 gps lat long series on the same Map in Splunk.

eg. FIrst series will be say Equipment A reported GPS Lat Long
Second series will be say Equipment B reported GPS Lat long

I looked at geostats and it does not mention about multiple gps lat long series capabilities. i tried and it did not like it.

I am not really stuck on geostats. Any method to plot multiple (say max upto 4) on the same Map in Splunk is what I looking at?

Kindly point me and confirm my assumptions either way :
a) Splunk can only plot one gps series and that it
b) The way to plot multiple gps series is .....

Thanks a lot,
Abhi

Re: Is there a way to plot 2 or more gps lat long series on the same Map using geostats or any other command / option? I have not found any.

somesoni2 — Thu, 08 Jun 2017 18:20:24 GMT

What's your current query for one equipment?

Re: Is there a way to plot 2 or more gps lat long series on the same Map using geostats or any other command / option? I have not found any.

abhijitp — Thu, 08 Jun 2017 18:29:21 GMT

Thanks somesoni2.

my query is sourcetype=geo | geostats count latfield=QueriedLatitude longfield=QueriedLongitude maxzoomlevel=18

Re: Is there a way to plot 2 or more gps lat long series on the same Map using geostats or any other command / option? I have not found any.

somesoni2 — Thu, 08 Jun 2017 19:17:48 GMT

Where does the differentiation happens for the equipments? If they can be differentiated using a field value, then geostats command provides option to do by <field>.

Re: Is there a way to plot 2 or more gps lat long series on the same Map using geostats or any other command / option? I have not found any.

abhijitp — Fri, 09 Jun 2017 22:18:45 GMT

Ok. I have extracted these GPS lat log for various equipments and they are available as :
Equipment1 - QueriedLatitude and QueriedLongitude
Equipment2 - MatchedLatitude and MatchedLongitude

Sample log line:
32.88718,-117.17383,0,0.0,312,32.88718,-117.17383,off road,0,0.0,derived,0,0.0,0,0,null,1.0,2.9
which translates to
QueriedLatitude,QueriedLongitude,0,0.0,312,MatchedLatitude,MatchedLongitude,off road,0,0.0,derived,0,0.0,0,0,null,1.0,2.9

geostats allows only one instance of latfield and longfield.

Re: Is there a way to plot 2 or more gps lat long series on the same Map using geostats or any other command / option? I have not found any.

abhijitp — Wed, 14 Jun 2017 23:39:08 GMT

My guess is Splunk can only plot one gps lat long series using geostats in a single query. I tried combing a subquery with another geostats but Splunk did not like it.

Re: Is there a way to plot 2 or more gps lat long series on the same Map using geostats or any other command / option? I have not found any.

abhijitp — Thu, 15 Jun 2017 23:07:27 GMT

I am not able to differentiate the two gps lat long series as shown above in the suggested geostats by option. I don't know how to do it.