My lat long data is in my event fields as follows:
Event data blah bla bla
latitude="38.9978366666667" longitude="-77.0305216666667" needs_recoding="false"/>
How do I create a map visualization using just Splunk Enterprise (not googlemaps app etc..)?
Have a look at the geostats command http://docs.splunk.com/Documentation/Splunk/6.3.3/SearchReference/Geostats
There are some good examples there.
There is a complete topic in the Dashboards and Visualizations manual: Mapping Data. It includes details and steps to create choropleth maps, as well as information about how to use the geostats command for simple maps and maps with markers on them.
View solution in original post