Dashboards & Visualizations

Choropleth Map in Glass Table not working

gpugliese
Explorer

Hi all,

I wrote a SPL query to generate the table to be used as data source for a world choropleth map within my glass table on Splunk Cloud with the ITSI app.

The query is defined as follows:

index=test
| rename country as iso2
| stats count by iso2
| lookup geo_attr_countries iso2 OUTPUT country
| fields - iso2
| geom geo_countries featureIdField="country"

It runs well in the search interface (both on a Splunk Cloud instance without ITSI and with ITSI) and in a world choropleth map on a "traditional" Splunk dashboard: the country are always colored as expected.

However, when I add this query in the data configuration section of a new world choropleth map on a new glass table in the ITSI app, I get only a message of "Cannot get geoJson data.".

I supposed the glass table cannot find the data, but if I use the same query in another visualization type (e.g. table), the data are displayed as expected. Data are correct and the query works well even if I click on "open in search" near the empty widget of the map while in visualization mode.

Could you please support me in resolving this issue? I couldn't find any suggestion or example online for choropleth maps in glass tables.

Thanks,

G.P.

Labels (2)

Fraserorrr
Engager

Any Resolution, been having an identical problem 

Thanks

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...