Dashboards & Visualizations

geostats how to add the country name

azulgrana
Path Finder

Hi there!

I'm playing a bit with the geostats sample from the Splunk Dashboards Example App. The samples produces a map with a breakdown by method (GET / POST) based on the coordinates creates a pie chart on the location.

The sample query looks pretty simple...

| inputlookup geomaps_data.csv
| iplocation device_ip
| geostats latfield=lat longfield=lon count(method) by method

2020-09-25_10-36-33.png

I've tried adding the Country name to show up on the tooltip box but I didn't have any luck. My goal is to keep the breakdown for the methods to then color code the charts as well as add the Country name on top of the methods.

Any ideas on how can I accomplish that?

TIA!

Labels (1)
0 Karma
1 Solution

thambisetty
SplunkTrust
SplunkTrust

Values shown up from field given in by clause. You can show up only two axis. Count and country or count and menthod.

————————————
If this helps, give a like below.

View solution in original post

thambisetty
SplunkTrust
SplunkTrust

Values shown up from field given in by clause. You can show up only two axis. Count and country or count and menthod.

————————————
If this helps, give a like below.

isoutamo
SplunkTrust
SplunkTrust

How about  values(country) on geostats?
r. Ismo

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...