All Apps and Add-ons

Custom Cluster Map Visualization: Why is the Clustered Mapping not specific enough and the Choropleth map wont work for me?



I have got mapping working for a query I am running by referencing a column officelocation which gives me e.g

OfficeLocation GoodCount BadCount
London 1 34
Sao Palo 22 45
Seattle 7 23
Dublin 18 19

I the office locations in an office csv with the Lat and Long in each column so this is referenced and the cluster map then maps out the number to this location. The issue is even though I ref somewhere in the middle of America it will only cluster this to we will say New York where I want the location highlighted.

sourcetype="i.csv" OR sourcetype="i.csv" OfficeLocation!="" OfficeLocation!="N/A" | lookup officegeo.csv "Office Code" as "OfficeLocation" | search UserAction!=None   | geostats  latfield=Lattitude longfield=Logitutde count by Office

I want to get the locations more specific, the lookup table looks correct but how do I do it with the other mapping type (Choropleth map) or any other method? thanks.


0 Karma

Splunk Employee
Splunk Employee

Try this out.

Clustered Single Value Map Visualization -

0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...