Splunk Search

Besides latitude, longitude, and the search result values, how do I include the location name in a Splunk 6.2.5 map popup?

htkwan
Path Finder

Hello,

I would like to provide the name of the location, besides the latitude, longitude & values. My search is:

 geostats outputlatfield=Geo_Location outputlongfield="-" latfield=Geo_Lt longfield=Geo_Lg latest(Value) by ID

The fields Geo_Location, Geo_Lt, & Geo_lg are from a lookup table.

alt text

Tags (3)
0 Karma
1 Solution

htkwan
Path Finder

We've found a workaround: Eval ID=ID + "@" + Geo_Location

View solution in original post

0 Karma

htkwan
Path Finder

We've found a workaround: Eval ID=ID + "@" + Geo_Location

View solution in original post

0 Karma

aljohnson_splun
Splunk Employee
Splunk Employee

Just add it to your functions:

geostats outputlatfield=Geo_Location outputlongfield="-" latfield=Geo_Lt longfield=Geo_Lg latest(Value), latest(Location) as Location by ID

Assuming, that is, that your location field is called Location

0 Karma

jeffland
Champion

What is the name of the location? Is it a field in your search?

Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!