I have my output table created from the mentioned query.
index=foo host=bla03u source=*.log sourcetype=bol_logs | chart values(Status) by Application_Name,Country,Transaction_Name
Source table:
Application_Name | Country | Transaction_Name | Status |
App1 | Australia | Homepage | 0 |
App1 | Australia | Login | 0 |
App2 | Singapore | Homepage | 1 |
App3 | China | Homepage | 0 |
App3 | China | Login | 1 |
Output table:
Appplication_Name | Country | Homepage | Login |
App1 | Australia | 0 | 0 |
App2 | Singapore | 1 | |
App3 | China | 0 | 1 |
Status :
0 - 'Success'
1 - 'Failure'
From this output table, I want to create one geomap with bubbles. My app should shows in red, if value '1' is present anywhere and app should shows in green, if both Homepage and Login contains value '0'.
Please suggest how to achieve this.