All Apps and Add-ons

Google Map App display by country

rikclark
New Member

I have a field in my data with a number that corresponds to a country. I also have a lookup which converts the value of this field to either a ISO country code or country name. I would like to display the number of events by country on the Google Map app. My query is as follows:

lookup foo_lookup foo as foo output country_iso3166_2 as country | search country="AU"

which selects the correct entries but does not display them on the map.

So, while geonormalize works for latitude and longitude, it seems that it is not possible to display this information graphically by country if this information is already known. I could modify the lookup to include the lat/long of the capitol of the country but this seems like more work than it should be.

0 Karma

rturk
Builder

I'm afraid that without either an IP address or a lat/long to work from, performing a lookup like you've suggested is the only way I can think of.

However don't dispair too much... with a bit of pokery-jiggery in your favourite text editor, this should be easy with this: http://lab.lmnixon.org/4th/worldcapitals.html

Hope this helps 🙂

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...