geom column not populated in the Statistics tab

[chintan_shah]

I am trying to create a Choropleth map for US states where i am trying to show the number of sales per States, my SPL is:
stats count(sales) as Sales by STATE_CD |geom geo_us_states featureIdField=STATE_CD but trying to run it,
the geom tab in Statistics is not getting populated and the Visualizations shows the US maps but the color are not present.
Can someone please help me out where i am missing, do i need to configure anything else?

[chintan_shah]

Thanks dmaislin, it worked

[dmaislin_splunk]

Excellent! Please upgoat my answer!

[dmaislin_splunk · Accepted solution]

You will need to have the State names where AZ = Arizona and not the abbreviations if I remember correctly. Perhaps you can fix the data or you can just use a lookup to automatically create a State field based on the STATE_CD field.

I just tried this on some quick data and it works fine....

index=* | stats count by State | geom geo_us_states featureIdField="State"

[jzapantis]

Can you please explain when to use: featureIdField="" - and also what should be put in place of field? What conditions must be met for a field to be used as a featureIdField?

Thank you 🙂