Dashboards & Visualizations

How to get multiple value read using choropleth map?

madakkas
Explorer

I have the below data say, in an csv – infile.csv


Country Field1 Field2 Field3
Australia V1F1 V1F2 V1F3
India V2F1 V2F2 V2F3
France V3F1 V3F2 V3F3

I am trying to create a choropleth map using the below command

`
|inputlookup PS_SPLUNK.csv
| geom geo_countries featureIdField=Country

`

But things do not turn up the way I expect (which is as below) when I hover over each country , rather nothing gets plotted

Say When I Hover over India I would wish to see

India
Field1 – V2F1
Field2 – V2F2
Field3 – V2F3

But when I change the above code to say –

|inputlookup PS_SPLUNK.csv
|table Country Field1
| geom geo_countries featureIdField=Country

Now with the above code when I hover over india , I see the values

India
Field1 – V2F1

So in a nutshell, I would want to show the values of many fields that a country could represent rather than the count field alone.
All Help is appreciated.

Thank You in advance

Tags (1)

Naa_Win
Path Finder

Hello,

I'm having the same issue. Could you please help me how you sorted out this?

Tags (1)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...