Dashboards & Visualizations

How to create geomaps with bubbles ?

georgear7
Communicator

I have my output table created from the mentioned query. 

index=foo host=bla03u source=*.log sourcetype=bol_logs | chart values(Status) by Application_Name,Country,Transaction_Name

Source table:

Application_NameCountryTransaction_NameStatus
App1AustraliaHomepage0
App1AustraliaLogin0
App2SingaporeHomepage1
App3ChinaHomepage0
App3ChinaLogin1

 

Output table:

Appplication_NameCountryHomepageLogin
App1Australia00
App2Singapore1 
App3China01

 

Status :

0 - 'Success'

1 - 'Failure'

From this output table, I want to create one geomap with bubbles. My app should shows in red, if value '1' is present anywhere and app should shows in green, if both Homepage and Login contains value '0'.

Please suggest how to achieve this.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...