How to animate more data points per time point in Geo Heatmap Custom Visualization animation?

[sebastianstruwe]

Hi splunkers,

Is there a way to animate more than one data point per time point? For example:
t represents time point
x represents longitude
y represents latitude

t | x  |  y |  value
1|25|42 |31
1|32|51 |28
1|12|52 |30
2|13|31 |24
2|17|35 |20

At the moment only this animation is possible:

t | x |  y |  value
1|25|42 |31
2|13|31 |24

If you take a look at the heatmap.js plugin page, it should be possible (https://www.patrick-wied.at/static/heatmapjs/example-heatmap-animation.html).

So my goal is to get an animated heatmap and not just an animated point.
Does anyone have an idea?

Best,
Sebastian

[cpetterborg]

So you want a heatmap that you can run through time in an animation like the example you provided, but the animation that is possible only does a single value across the whole heat map at this point? Can you provide the search that got you the data that you say is possible, including the heatmap visualization you can use? Also if you can get the data in a search like you want, can you provide some more information about that search?

[sebastianstruwe]

So you want a heatmap that you can run through time in an animation like the example you provided, but the animation that is possible only does a single value across the whole heat map at this point?
Yes, that's the problem!

I'm using the Geo Heatmap Custom Visualization (3217) app. The basic search isn't the problem, it's more the documentation of the animated visualisation. I'm able to build a animated heatmap with one data point per time point, but if I use two, it doesn't work. Also if I use mvzip...
Last but not least I couldn't find any example with more than one data point per time point.

Best,
Sebastian

[nplamondon]

I'm not sure about the plugin, but you can generate a multivalue "point" list by time with mvzip.

...
| stats values(x) as lon values(y) as lat values(value) as val by t
| eval location=mvzip(lon, lat)
| eval point=mvzip(location, val)

[sebastianstruwe]

Hi nplamondon,

thanks for your reply, but unfortunately this doesn't work for the app. I think the app is only made to show one data point per time point...