Dashboards & Visualizations

How to plot choropleth map from a csv file? No internet connection.

kangje168
Explorer

Bonjour,
I am using a csv file with 3 columns, let's name it ct.csv, it looks like this:
Country or entitie, Indice1, indice2
France, 11,12
Canada,41,44
Kosovo,78,56
Hong Kong,32,87
........
I have applications Search and report, google maps and Lookup Editor on my splunk, the problem is my VM of my company has no internet connection, which means I cannot use google map application, so what can I do for plot a choropleth map from a csv file? Thanks

0 Karma
1 Solution

DalJeanis
Legend

run anywhere example...

| makeresults 
| eval count=25
| eval Country="France!!!Kosovo!!!United States!!!Canada!!!Hong Kong" 
| makemv delim="!!!" Country 
| mvexpand Country 
| geom geo_countries featureIdField=Country

You have to zoom and scroll as appropriate to be able to see Kosovo and Hong Kong, but they are there.

View solution in original post

DalJeanis
Legend

run anywhere example...

| makeresults 
| eval count=25
| eval Country="France!!!Kosovo!!!United States!!!Canada!!!Hong Kong" 
| makemv delim="!!!" Country 
| mvexpand Country 
| geom geo_countries featureIdField=Country

You have to zoom and scroll as appropriate to be able to see Kosovo and Hong Kong, but they are there.

woodcock
Esteemed Legend
0 Karma

DalJeanis
Legend

Yes, I thought the basic splunk installation came with a couple of geo files for this.

Not sure if Kosovo or Hong Kong are considered a "country" in the basic geo files, though.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...