All Apps and Add-ons

Custom Cluster Map & Geo Heatmap Custom Visualization: How to make these map apps work on Splunk?

DavidLago
New Member

I have installed some apps, including Custom Cluster Map Visualization and Geo Heatmap Custom Visualization, but there is little or no information about them in the internet, also the app do not provide a help file or anything like it.

I'm stuck, I have no idea how to make that work.

So far I've listed the cities I want to be shown in red on the map (in case a specific value crosses a threshold), I have all the Lat and Long for each of them, but nothing that I test show any results. For example:

earliest=-15m object="Processor" counter="% Processor Time" sourcetype=CPU | where Value>90 | table host Value | geostats latfield=25.204849 longfield=55.270783 avg(count)

How do I get started here?

0 Karma

ziegfried
Influencer

geostats expects field names for latfield/longfield instead of values. Otherwise your search looks reasonable. Try this instead:

 earliest=-15m object="Processor" counter="% Processor Time" sourcetype=CPU | where Value>90 | table host Value | eval lat=25.204849 | eval long=55.270783 | geostats latfield=lat longfield=long avg(count)
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...