Dashboards & Visualizations

Choropleth Map - move AK and HI to be viewed on dashboard with continental US

andrew_j_kuhn
Loves-to-Learn

I am looking for a way to move AK and HI on the dashboard to be viewed with the continental US. I did find the following documentation:

https://docs.splunk.com/Documentation/DashApp/0.9.0/DashApp/mapsChorConfig#:~:text=One%20exception%2....

 

However when I convert the JSON to XML it states that 'LogicalBounds' is invalid. Is there a way to use this? I do not want to zoom in and out on my splunk dashboard to view data.

Labels (2)
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@andrew_j_kuhn - You need to use following XML option:

mapping.map.fitBounds - (south-lat, west-long, north-lat, east-long)

Examlple:

  <option name="mapping.map.fitBounds">
    (37.5,-123,38,-122)
  </option>

Find more details about simple XML options for map here - https://docs.splunk.com/Documentation/SplunkCloud/8.2.2202/Viz/PanelreferenceforSimplifiedXML#map 

 

I hope this helps!!!

0 Karma

andrew_j_kuhn
Loves-to-Learn

That setting seems to be a zoom setting? I am trying to accomplish the map layout to look like this:

andrew_j_kuhn_0-1650026809820.png

 

Not the colors, but notice how Alaska and Hawaii are moved so they can be easily seen with out panning out or moving the map.

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

You need to create/add a geospatial lookup file for that. (that's what describes the map with polygons)

The file format is KMZ.

Splunk comes default with two lookups:

  1. geo_us_states
  2. geo_countries

Reference - https://docs.splunk.com/Documentation/Splunk/8.2.6/Knowledge/Configuregeospatiallookups 

(In your case you may be tried to clone & update the current US lookup manually or try to see if you can find that lookup on the web somewhere.

 https://docs.splunk.com/Documentation/DashApp/0.9.0/DashApp/mapsChor 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...