topic Re: How to plot data on the Splunk Map from lookup data using Country Name, Country Code, City Name but not IP? in Splunk Search

How to plot data on the Splunk Map from lookup data using Country Name, Country Code, City Name but not IP?

DanielFordWA — Thu, 31 Jul 2014 15:49:15 GMT

I have a system that requires authentication so each user has a unique identifier.

I have a lookup to enrich users that can return the "Location Country" or "Location Region" or ISO country codes.

I would like to plot data against these users actions on the Splunk map. I do not have access to the users IP address.

I've looked around for a while but have no idea how to do this, can anyone point me in the right direction?

Thanks,

Dan

Edit: for clarification... is there a way I can take the ISO country codes, or city names and look them up to produce a longitude and latitude, then use that in the maps?

It would seem like a trick has been missed if you cant convert ISO country codes this way.

Re: How to plot data on the Splunk Map from lookup data using Country Name, Country Code, City Name but not IP?

strive — Thu, 31 Jul 2014 19:54:26 GMT

As per my knowledge you need latitude and longitude to plot points on map. With out these it is not possible.

Some links here in splunk for more information

http://answers.splunk.com/answers/138196/how-to-map-results-in-google-maps-in-simple-xml-without-using-the-geostats-function

http://answers.splunk.com/answers/129281/map-geostats-display-city-instead-of-latitude-and-longitude

http://answers.splunk.com/answers/112914/geostat-remove-other

Re: How to plot data on the Splunk Map from lookup data using Country Name, Country Code, City Name but not IP?

DanielFordWA — Fri, 01 Aug 2014 14:29:38 GMT

Ok I found this.

https://opendata.socrata.com/dataset/Country-List-ISO-3166-Codes-Latitude-Longitude/mnkm-8ram

I hoped Splunk could do this without adding another lookup.

Cheers,

Dan

Re: How to plot data on the Splunk Map from lookup data using Country Name, Country Code, City Name but not IP?

marina_rovira — Tue, 26 Apr 2016 15:44:57 GMT

Hello! How did you resolve this? I'm trying to visualize the data per cities in a map and I'm not achieving it 😞

Thank you!