All Apps and Add-ons

Custom Cluster Map Visualization: Why is the Clustered Mapping not specific enough and the Choropleth map wont work for me?

colinmchugo
Explorer

Hi

I have got mapping working for a query I am running by referencing a column officelocation which gives me e.g

OfficeLocation GoodCount BadCount
London 1 34
Sao Palo 22 45
Seattle 7 23
Dublin 18 19
Etc

I the office locations in an office csv with the Lat and Long in each column so this is referenced and the cluster map then maps out the number to this location. The issue is even though I ref somewhere in the middle of America it will only cluster this to we will say New York where I want the location highlighted.

sourcetype="i.csv" OR sourcetype="i.csv" OfficeLocation!="" OfficeLocation!="N/A" | lookup officegeo.csv "Office Code" as "OfficeLocation" | search UserAction!=None   | geostats  latfield=Lattitude longfield=Logitutde count by Office

I want to get the locations more specific, the lookup table looks correct but how do I do it with the other mapping type (Choropleth map) or any other method? thanks.

Colin

0 Karma

ssadh_splunk
Splunk Employee
Splunk Employee

Try this out.

Clustered Single Value Map Visualization - https://splunkbase.splunk.com/app/3124

0 Karma
Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...