Displaying Google Maps GeoIP Data

Splunk Employee
Splunk Employee

For some reason we cannot get the google maps app to plot our points on the map. This is the search we have:

sourcetype="TEST"| geoip SourceIP | eval _geo=SourceIP_latitude+","+SourceIP_longitude

but google maps keeps saying there is not data to plot even after casting a _geo variable concatenating the lon and lat. Any ideas?

Tags (3)
0 Karma


I am guessing that SourceIP is your field that contains an IP address. If this is true try:

sourcetype="TEST" SourceIP=* | stats count by SourceIP | geoip SourceIP

State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!