All Apps and Add-ons

Can you display a cluster map with no results?

wmeyers
Explorer

I have a dashboard that contains a Clustered Single Value Map Visualization with markers on it. It works fine when there are results for the query, but get "Error rendering Clustered Single Value Map Visualization visualization: Incorrect Fields Detected - latitude & longitude fields required" when there are no results.

Instead I would like just a map with no markers on it instead of this error. Is this possible?

0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

This is a Custom visualization, so the Viz Owner (splunk labs) would have to program the viz to make that happen.

View solution in original post

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

This is a Custom visualization, so the Viz Owner (splunk labs) would have to program the viz to make that happen.

0 Karma

wmeyers
Explorer

Since this seems to be the case, I wanted to share what I found to get around the issue in case others have the same issue. I added

    | appendpipe [stats count| eval latitude=0 |eval longitude=0 | eval title="No Results" | eval description="There were no results found with your search criteria." | where count==0 |table latitude, longitude, title, description]

This makes a single marker so that the map still shows up, and the marker will display the description when clicked on.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...