Dashboards & Visualizations

How to get multiple value read using choropleth map?

madakkas
Explorer

I have the below data say, in an csv – infile.csv


Country Field1 Field2 Field3
Australia V1F1 V1F2 V1F3
India V2F1 V2F2 V2F3
France V3F1 V3F2 V3F3

I am trying to create a choropleth map using the below command

`
|inputlookup PS_SPLUNK.csv
| geom geo_countries featureIdField=Country

`

But things do not turn up the way I expect (which is as below) when I hover over each country , rather nothing gets plotted

Say When I Hover over India I would wish to see

India
Field1 – V2F1
Field2 – V2F2
Field3 – V2F3

But when I change the above code to say –

|inputlookup PS_SPLUNK.csv
|table Country Field1
| geom geo_countries featureIdField=Country

Now with the above code when I hover over india , I see the values

India
Field1 – V2F1

So in a nutshell, I would want to show the values of many fields that a country could represent rather than the count field alone.
All Help is appreciated.

Thank You in advance

Tags (1)

Naa_Win
Path Finder

Hello,

I'm having the same issue. Could you please help me how you sorted out this?

Tags (1)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Cloud Application Management in Terraform

Now On-Demand   We’re diving into how you can bring Infrastructure as Code (IaC) principles to your Splunk ...

What's New in Splunk Enterprise Security (ES) 8.6

Purpose-Built AI Agents for the Agentic SOC  Splunk Enterprise Security 8.6 expands AI in Security with ...

From Raw Data to Executive-Ready Stories, Faster

Build Data Stories for Every Audience  A dashboard is rarely just a dashboard. It might be the view an ...