Dashboards & Visualizations

How to get multiple value read using choropleth map?

madakkas
Explorer

I have the below data say, in an csv – infile.csv


Country Field1 Field2 Field3
Australia V1F1 V1F2 V1F3
India V2F1 V2F2 V2F3
France V3F1 V3F2 V3F3

I am trying to create a choropleth map using the below command

`
|inputlookup PS_SPLUNK.csv
| geom geo_countries featureIdField=Country

`

But things do not turn up the way I expect (which is as below) when I hover over each country , rather nothing gets plotted

Say When I Hover over India I would wish to see

India
Field1 – V2F1
Field2 – V2F2
Field3 – V2F3

But when I change the above code to say –

|inputlookup PS_SPLUNK.csv
|table Country Field1
| geom geo_countries featureIdField=Country

Now with the above code when I hover over india , I see the values

India
Field1 – V2F1

So in a nutshell, I would want to show the values of many fields that a country could represent rather than the count field alone.
All Help is appreciated.

Thank You in advance

Tags (1)

Naa_Win
Path Finder

Hello,

I'm having the same issue. Could you please help me how you sorted out this?

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and stall ...

Print, Leak, Repeat: UEBA Insider Threats You Can't Ignore

Are you ready to uncover the threats hiding in plain sight? Join us for "Print, Leak, Repeat: UEBA Insider ...

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...