Splunk Enterprise

help on geostats

jip31
Motivator

hi 

I use geostats for the first time

 

 

| inputlookup gps3.csv 
| geostats latfield=Latitude longfield=Longitude count by Couleur

 

I need to display on the pie charts the number or the percentge of Couleur

And when i open my dashboard I also need to focus directly on my country instead the world map

How to do this please?

I also need something else 

I need to count the "id" values field and to display it on my map but nothing happens

What is wrong please?

index=toto sourcetype=tutu site="x" OR site="y" OR site="z" 
| fields id site 
| stats dc(id) as id 
| lookup gps3.csv Ville as site output Latitude Longitude 
| geostats latfield=Latitude longfield=Longitude count(id) by site

 

Labels (1)
Tags (1)
0 Karma

jip31
Motivator

Is anybody can help please?

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...