topic Re: How to plot a bubble representing the total number of occurrences of an event using Latitude and Longitude with geostats? in Splunk Search
https://community.splunk.com/t5/Splunk-Search/How-to-plot-a-bubble-representing-the-total-number-of/m-p/223035#M65624
<P>Try something like this</P>
<PRE><CODE>index=testinputs | geostats latfield=latitude longfield=longitude sum(total) as total
</CODE></PRE>Fri, 26 Feb 2016 23:13:59 GMTsomesoni22016-02-26T23:13:59ZHow to plot a bubble representing the total number of occurrences of an event using Latitude and Longitude with geostats?
https://community.splunk.com/t5/Splunk-Search/How-to-plot-a-bubble-representing-the-total-number-of/m-p/223034#M65623
<P>Hi There,</P>
<P>I have 158 events with three fields - <STRONG>latitude</STRONG>, <STRONG>longitude</STRONG>, and an integer value representing the total number of occurrences of an event at that location (latitude/longitude). I would like to plot a bubble representing the integer value at each location. I have tried the following search string:</P>
<PRE><CODE>index=testinputs | geostats latfield=latitude longfield=longitude count
</CODE></PRE>
<P>The map remains blank and when I look at the statistics page, it is only returning 58 rows with duplicate entries for the same latitude/longitude combination (see the attached screenshot).<BR />
<span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/1090i7149AD8F7901064C/image-size/large?v=v2&px=999" role="button" title="alt text" alt="alt text" /></span></P>
<P>Any suggestions on how to achieve my desired result?</P>
<P>Thanks!</P>Fri, 26 Feb 2016 08:14:49 GMThttps://community.splunk.com/t5/Splunk-Search/How-to-plot-a-bubble-representing-the-total-number-of/m-p/223034#M65623avisram2016-02-26T08:14:49ZRe: How to plot a bubble representing the total number of occurrences of an event using Latitude and Longitude with geostats?
https://community.splunk.com/t5/Splunk-Search/How-to-plot-a-bubble-representing-the-total-number-of/m-p/223035#M65624
<P>Try something like this</P>
<PRE><CODE>index=testinputs | geostats latfield=latitude longfield=longitude sum(total) as total
</CODE></PRE>Fri, 26 Feb 2016 23:13:59 GMThttps://community.splunk.com/t5/Splunk-Search/How-to-plot-a-bubble-representing-the-total-number-of/m-p/223035#M65624somesoni22016-02-26T23:13:59ZRe: How to plot a bubble representing the total number of occurrences of an event using Latitude and Longitude with geostats?
https://community.splunk.com/t5/Splunk-Search/How-to-plot-a-bubble-representing-the-total-number-of/m-p/223036#M65625
<P>Well I feel completely silly. The data I was provided had the latitude and longitude fields reversed (i.e. the value for latitude was in the longitude field and the value for longitude was in the latitude field). So all of my points were getting plotted - except they were in Antarctica. Once I set the values correctly my points showed up in the correct locations. The search string I ended up with was:</P>
<P>index=testinputs | rename latitude as lon longitude as lat | geostats count as Total</P>Sat, 27 Feb 2016 00:21:52 GMThttps://community.splunk.com/t5/Splunk-Search/How-to-plot-a-bubble-representing-the-total-number-of/m-p/223036#M65625avisram2016-02-27T00:21:52Z