Dashboards & Visualizations

How to create a map visualization in a Splunk dashboard using latitude and longitude data?

jpelletier_splu
Splunk Employee
Splunk Employee

My lat long data is in my event fields as follows:

Event data  blah bla bla
 latitude="38.9978366666667" longitude="-77.0305216666667" needs_recoding="false"/>

How do I create a map visualization using just Splunk Enterprise (not googlemaps app etc..)?

0 Karma
1 Solution

ChrisG
Splunk Employee
Splunk Employee

There is a complete topic in the Dashboards and Visualizations manual: Mapping Data. It includes details and steps to create choropleth maps, as well as information about how to use the geostats command for simple maps and maps with markers on them.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

There is a complete topic in the Dashboards and Visualizations manual: Mapping Data. It includes details and steps to create choropleth maps, as well as information about how to use the geostats command for simple maps and maps with markers on them.

jplumsdaine22
Influencer

Have a look at the geostats command http://docs.splunk.com/Documentation/Splunk/6.3.3/SearchReference/Geostats

There are some good examples there.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...