https://community.splunk.com/t5/Splunk-Search/How-to-combine-duplicate-Latitude-and-longitude-values-in-the/m-p/493706#M137672 <PRE><CODE>index=newfortinet user=AARIBEB msg="URL belongs to a denied category in policy" direction=outgoing action=blocked |stats sum(count) by dstip |sort - count |iplocation dstip |where Country="Namibia" |geostats count by Country globallimit=0 |fields - geobin |eval tmp=Namibia."_".latitude."_".longitude |dedup tmp |fields Namibia, latitude, longitude </CODE></PRE> <P>Hi, @schalkrust <BR /> How about it?</P> Tue, 26 Nov 2019 14:03:05 GMT to4kawa 2019-11-26T14:03:05Z https://community.splunk.com/t5/Splunk-Search/How-to-combine-duplicate-Latitude-and-longitude-values-in-the/m-p/493705#M137671 <P>I just want to clean up my search of 'noise'as my stats table gets populated by duplicate values from the save latitude and longitude values.</P> <P>index=newfortinet user=AARIBEB msg="URL belongs to a denied category in policy" direction=outgoing action=blocked <BR /> |stats sum(count) by dstip<BR /> |sort - count<BR /> |iplocation dstip<BR /> |where Country="Namibia"<BR /> |geostats count by Country globallimit=0<BR /> |fields - geobin</P> <P>See attached result screanshot</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/8008i8F7883871DF7EFBC/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Tue, 26 Nov 2019 13:37:03 GMT https://community.splunk.com/t5/Splunk-Search/How-to-combine-duplicate-Latitude-and-longitude-values-in-the/m-p/493705#M137671 schalkrust 2019-11-26T13:37:03Z https://community.splunk.com/t5/Splunk-Search/How-to-combine-duplicate-Latitude-and-longitude-values-in-the/m-p/493706#M137672 <PRE><CODE>index=newfortinet user=AARIBEB msg="URL belongs to a denied category in policy" direction=outgoing action=blocked |stats sum(count) by dstip |sort - count |iplocation dstip |where Country="Namibia" |geostats count by Country globallimit=0 |fields - geobin |eval tmp=Namibia."_".latitude."_".longitude |dedup tmp |fields Namibia, latitude, longitude </CODE></PRE> <P>Hi, @schalkrust <BR /> How about it?</P> Tue, 26 Nov 2019 14:03:05 GMT https://community.splunk.com/t5/Splunk-Search/How-to-combine-duplicate-Latitude-and-longitude-values-in-the/m-p/493706#M137672 to4kawa 2019-11-26T14:03:05Z https://community.splunk.com/t5/Splunk-Search/How-to-combine-duplicate-Latitude-and-longitude-values-in-the/m-p/493707#M137673 <P>Just add this:</P> <PRE><CODE>... | dedup Namibia latitude longitude </CODE></PRE> Tue, 26 Nov 2019 23:24:57 GMT https://community.splunk.com/t5/Splunk-Search/How-to-combine-duplicate-Latitude-and-longitude-values-in-the/m-p/493707#M137673 woodcock 2019-11-26T23:24:57Z