All Apps and Add-ons

Reduction of points in google map

digsplunk
New Member

I want to reduce the number of points that are displayed in my google map. If the latitude and longitude is the same I want to count it as one point. I tried this
Number="123456" | eval ResLat=round(Latitude,3) | eval ResLong = round(Longitude,3) | eval _geo=ResLat+","+ResLong it still gave me the same number of points. Any ideas on how to remove these duplicates

0 Karma

ziegfried
Influencer

You can use a search in the following form to aggregate the location information:

  ... eval ResLat=round(Latitude,3) | eval ResLong = round(Longitude,3) | eval _geo=ResLat+","+ResLong | stats count as _geo_count by _geo

This will only return 1 result for each unique location and still preserves the count information.

digsplunk
New Member

Hmmmm? Does not seem like "| stats count as _geo_count by _geo" has any effect?

However | dedup ResLat, resLong | eval _geo=ResLat+","+ResLong seems to give me what I want

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...