Alerting

How to define colors as per ranges using rangemap in geostats map.?

SanthoshSreshta
Contributor

Hi All.

I want alerts to be displayed on map for easy understanding.
i have used this Query

source="Churn_Map.csv" sourcetype="Churn_map" 
| eval Churn = if(Churn="True.","1","0") 
| eventstats sum(Churn) as true_churn , count(Churn) as total_churn by state 
| eval prop= true_churn*100 / total_churn 
| geostats values(prop) by StateName globallimit=0
| rangemap field=prop green=0-5 yellow=6-10 orange=11-15 default=red

but colors are not displaying as i defined. any improvements.?
the values are from min 5 to max 20. so i need alerts to seen on pie charts on map,by default it is showing some colors.
Green : 0-5
Yellow : 6-10
Orange :11-15
Red : 16 and above.
any reference documents and links are really appreciated 🙂

Thanks,
Santhosh.

0 Karma

jaracan
Communicator

Because the field "prop" is not existing anymore. You can add the "as" on your command to name it as prop again.

Something like this.
| geostats values(prop) as prop by StateName globallimit=0

0 Karma

vganjare
Builder
0 Karma

SanthoshSreshta
Contributor

I am not able to understand that @vganjare

0 Karma
Get Updates on the Splunk Community!

Index This | A sphere has three, a circle has two, and a point has zero. What is it?

September 2023 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...