Thanks in advance. I'm struggling trying to display the amount of requests per zip code however its just showing the amount of zip codes.
index=soa source="export.csv" host="misssplunksh01.corp.rndc-usa.com" index="soa" sourcetype="csv"
| geostats latfield=GEO_LAT longfield=GEO_LONG sum(TOTAL_SALES) by Zip
How the data looks like:
How the map looks like.
Please let me know if something is unclear , thanks again
|stats values(TOTAL_SALES) as "Total Sales" by Zip
Sum grabs the total of all field values while stats values grabs the each key of each value and outputs them. Let me know the news pls.