All Apps and Add-ons

Google Maps for windows does not work / Web intelligence

asarolkar
Builder

I have a Web Intelligence app which has a google maps component within (this has its own geoip.py and geonormalize.py). The Google Maps app has its own geoip.py and geonormalize.py).

Based on my understanding for either app, those scripts are the drivers of the process of putting data from sourcetypes on the map and display everything on the map.

My issue is that Google Maps doesnt work when Web Intelligence Does !!!

When Web Intelligence is enabled and Google Maps is disabled, the map within the Web Intelligence app works just fine. I can actually see how the clientips, cities, ports etc are plotted on the map.

When I run the following searches (see below), while I do get actual events under "interesting fields", but the results, clientips, user, host, pid etc - I do not see any results ON THE ACTUAL GOOGLE MAP (The Error Message says preparing a preview and then 0 results with location information)

    * | lookup geoip clientip | geonormalize 
    sourcetype=* | lookup geoip clientip | geonormalize 
* | rex "(?<ip>\d+\.\d+\.\d+\.\d+)" | eval clientip=ip | lookup geoip clientip | geonormalize 

Why is maps working for Web Intelligence but not for Google Maps ??

Is there an unspoken rule in Splunk where that google Maps MUST be disabled for Web Intelligence to function ?

Reason I ask is because while one business unit that is our customer uses the Web Intelligence App there is another that wants to use advanced xml to create a CUSTOM dashboard which which will use Google Maps

0 Karma
1 Solution

asarolkar
Builder

Ha ! The issue was that the version of the Google Maps App I was using was not compatible with 4.3.3 which is the version of Splunk I have been using !

View solution in original post

0 Karma

asarolkar
Builder

Ha ! The issue was that the version of the Google Maps App I was using was not compatible with 4.3.3 which is the version of Splunk I have been using !

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...