Dashboards & Visualizations

Choropleth Map with values instead of count

bosch_softtec
Path Finder

Hi,
I like to setup a choropleth map but I'm not able to build this map by the vales of a zone. I only got it working by counting the country's which results in value=1.

My search looks like:

| inputcsv Region.csv  | join max=0 Region [inputcsv ISO_3166_Codes_Lat_Long.csv ] | stats count by Country | geom geo_countries featureIdField="Country"

Region.csv file contains the country code and the number of clients. It looks like:

Region,Number
DE,51
GB,154
US,197

After the join I get all needed informations to setup the map but the result is:

Country        | count | ...
Germany        | 1     | ...
United Kingdom | 1     | ...
United States  | 1     | ...

I like to get:

Country        | count | ...
Germany        | 51    | ...
United Kingdom | 154   | ...
United States  | 197   | ...

I tried it with:

| inputcsv Region.csv  | join max=0 Region [inputcsv ISO_3166_Codes_Lat_Long.csv ] | stats values(Number) by Country | geom geo_countries

But the map won't be coloured.

Any idea how to solve this?

Thank's for your ideas and help
Best regards
Thorsten

Tags (1)
0 Karma
1 Solution

gokadroid
Motivator

Since I don't have the data to plot similar stuff but If there is only one Number value per country you can you please try this and see if it works out:

...| chart max(Number) by Country | geom geo_countries featureIdField="Country"

View solution in original post

0 Karma

bosch_softtec
Path Finder

Hi gokadroid, thanks for you answer, it's working 🙂

gokadroid
Motivator

Since I don't have the data to plot similar stuff but If there is only one Number value per country you can you please try this and see if it works out:

...| chart max(Number) by Country | geom geo_countries featureIdField="Country"
0 Karma
Get Updates on the Splunk Community!

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...