_geo does not plot on google maps

[preethiswamy]

Good Evening All, I am new to splunk and I need to a POC integrating with google maps. I appreciate any help. I have created a lookup table us_cities, configured transforms/props.conf. In fact I even have the below command resulting in the response "4 results with location information ( 4 distinct locations ) over all time" but I don't see anything plotted on the map. Also, the geo results tab shows the right lat,long retrieved from the lookup table for all the 4 locations.

| inputlookup us_cities.csv | search city="Chattanooga" | eval _geo=lat+","+long

[martin_mueller · Accepted solution]

The built-in maps are only available since version 6, so most info on the internet predates that.

If you have fields lat and long, you can append this to your search:

... | geostats count latfield=lat longfield=long 

That will compute geo-based bins, similar to time-based bins in timechart, for various zoom levels. Don't forget to switch the visualization to Map, and see http://docs.splunk.com/Documentation/Splunk/6.1.1/SearchReference/geostats for reference of geostats.
Additionally, check out http://apps.splunk.com/app/1603/ for examples.

[preethiswamy]

This worked. Thanks Martin.

[preethiswamy]

Thank you Martin, I am checking it out now.

[preethiswamy]

Thanks Martin. I want to map out cities and most answers on splunk seem to point to google maps. I just started looking into geostats, any quick tips?

[martin_mueller]

Have you considered using the built-in Splunk Maps?