All Apps and Add-ons

Reduction of points in google map

digsplunk
New Member

I want to reduce the number of points that are displayed in my google map. If the latitude and longitude is the same I want to count it as one point. I tried this
Number="123456" | eval ResLat=round(Latitude,3) | eval ResLong = round(Longitude,3) | eval _geo=ResLat+","+ResLong it still gave me the same number of points. Any ideas on how to remove these duplicates

0 Karma

ziegfried
Influencer

You can use a search in the following form to aggregate the location information:

  ... eval ResLat=round(Latitude,3) | eval ResLong = round(Longitude,3) | eval _geo=ResLat+","+ResLong | stats count as _geo_count by _geo

This will only return 1 result for each unique location and still preserves the count information.

digsplunk
New Member

Hmmmm? Does not seem like "| stats count as _geo_count by _geo" has any effect?

However | dedup ResLat, resLong | eval _geo=ResLat+","+ResLong seems to give me what I want

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...