Dashboards & Visualizations

Is there any way of displaying empty map if there is no data in simple xml?

nivethainspire_
Explorer
 
Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Yeah, similar approach as when e.g. filling a zero into a single value when there is no data.

Take the sample search from the Splunk 6 Dashboard Examples app:

| inputlookup geomaps_data.csv | iplocation device_ip | geostats latfield=lat longfield=lon count by method

That returns a bunch of geo buckets. If I modify it to return no data by adding a where 1=2, the map disappears. By adding a little appendpipe to the end the map is back but empty:

| inputlookup geomaps_data.csv | iplocation device_ip | where 1=2 | geostats latfield=lat longfield=lon count by method
| appendpipe [stats count | where count=0 | eval geobin = "bin_id_zl_0_y_3_x_2" | eval latitude= -10.00000 | eval logitude = -55.00000]

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Yeah, similar approach as when e.g. filling a zero into a single value when there is no data.

Take the sample search from the Splunk 6 Dashboard Examples app:

| inputlookup geomaps_data.csv | iplocation device_ip | geostats latfield=lat longfield=lon count by method

That returns a bunch of geo buckets. If I modify it to return no data by adding a where 1=2, the map disappears. By adding a little appendpipe to the end the map is back but empty:

| inputlookup geomaps_data.csv | iplocation device_ip | where 1=2 | geostats latfield=lat longfield=lon count by method
| appendpipe [stats count | where count=0 | eval geobin = "bin_id_zl_0_y_3_x_2" | eval latitude= -10.00000 | eval logitude = -55.00000]
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...