https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401293#M116182 <P>I do not get any results for this string - <BR /> | inputlookup test_geo_db | geostats latfield=eventlat longfield=eventlong</P> Wed, 30 Sep 2020 00:47:04 GMT rashi83 2020-09-30T00:47:04Z https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401289#M116178 <P>Created a lookup file with static Latitude and Longitude for 2 countries and used this search:</P> <P><CODE>| inputlookup test_geo_db | geostats count</CODE></P> <P>But I can't see map plotted with it?</P> Fri, 31 May 2019 17:49:55 GMT https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401289#M116178 rashi83 2019-05-31T17:49:55Z https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401290#M116179 <P>Can you please share the results of <CODE>| inputlookup test_geo_db</CODE>? and if you could tell us what do you see as the result if you can't see the map it would be helpful. Thanks.</P> Sat, 01 Jun 2019 08:56:46 GMT https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401290#M116179 harshpatel 2019-06-01T08:56:46Z https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401291#M116180 <P>What are the field names for <CODE>latitude</CODE> and <CODE>longitude</CODE> in the lookup <CODE>test_geo_db</CODE></P> <P>If you have not used the arguments <CODE>latfield</CODE> and <CODE>longfield</CODE> along with geostats it assumes default latitude and longitude fields as <CODE>lat</CODE> and <CODE>lon</CODE> respectively. Refer to Splunk documentation for proper use of geostats.</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Geostats#Syntax">https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Geostats#Syntax</A></P> Sat, 01 Jun 2019 16:51:27 GMT https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401291#M116180 niketn 2019-06-01T16:51:27Z https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401292#M116181 <P>I can see results for :<BR /> | inputlookup test_geo_db as <BR /> hostname latitude longitutude<BR /> us 32.7767 96.797<BR /> em 52.1386 0.4668</P> <P>I do not see any points on the MAP</P> Wed, 30 Sep 2020 00:47:01 GMT https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401292#M116181 rashi83 2020-09-30T00:47:01Z https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401293#M116182 <P>I do not get any results for this string - <BR /> | inputlookup test_geo_db | geostats latfield=eventlat longfield=eventlong</P> Wed, 30 Sep 2020 00:47:04 GMT https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401293#M116182 rashi83 2020-09-30T00:47:04Z https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401294#M116183 <P>you have to pass file names same as the lookup file i.e.</P> <PRE><CODE>| inputlookup test_geo_db | geostats latfield=latitude longfield=longitutude </CODE></PRE> Mon, 03 Jun 2019 15:17:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-to-plot-Cluster-Choropleth-map-with-source-data-hostname/m-p/401294#M116183 harshpatel 2019-06-03T15:17:17Z