https://community.splunk.com/t5/Getting-Data-In/Why-does-Splunk-shows-fewer-coordinates-when-statistics-are/m-p/477125#M100209 <P>Hi</P> <P>I inserted a .kmz file into Splunk with the coordinates of some Ontario 's districts.<BR /><BR /> In FIG 1 (a .csv I obtained from the kmz file), you will see that there are many coordinates for the ACTONO district.</P> <P>But when I made a SPL query (where I can see the number of IPs for each district (featureId)) ACTONO has FEWER coordinates.<BR /> The same happens when I export this into a .csv file (see FIG 2). </P> <P>Why does this happen? Where are the other coodinates?</P> <P>FIG 1<BR /> <span class="lia-inline-image-display-wrapper" image-alt="FIG 1"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7911iE4E8B55F0A4AACEE/image-size/large?v=v2&amp;px=999" role="button" title="FIG 1" alt="FIG 1" /></span></P> <P>FIG 2<BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7912i854BDA1CFE65F15F/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Thu, 07 Nov 2019 18:18:19 GMT rosho 2019-11-07T18:18:19Z https://community.splunk.com/t5/Getting-Data-In/Why-does-Splunk-shows-fewer-coordinates-when-statistics-are/m-p/477125#M100209 <P>Hi</P> <P>I inserted a .kmz file into Splunk with the coordinates of some Ontario 's districts.<BR /><BR /> In FIG 1 (a .csv I obtained from the kmz file), you will see that there are many coordinates for the ACTONO district.</P> <P>But when I made a SPL query (where I can see the number of IPs for each district (featureId)) ACTONO has FEWER coordinates.<BR /> The same happens when I export this into a .csv file (see FIG 2). </P> <P>Why does this happen? Where are the other coodinates?</P> <P>FIG 1<BR /> <span class="lia-inline-image-display-wrapper" image-alt="FIG 1"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7911iE4E8B55F0A4AACEE/image-size/large?v=v2&amp;px=999" role="button" title="FIG 1" alt="FIG 1" /></span></P> <P>FIG 2<BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/7912i854BDA1CFE65F15F/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Thu, 07 Nov 2019 18:18:19 GMT https://community.splunk.com/t5/Getting-Data-In/Why-does-Splunk-shows-fewer-coordinates-when-statistics-are/m-p/477125#M100209 rosho 2019-11-07T18:18:19Z