Splunk Search

Besides latitude, longitude, and the search result values, how do I include the location name in a Splunk 6.2.5 map popup?

htkwan
Path Finder

Hello,

I would like to provide the name of the location, besides the latitude, longitude & values. My search is:

 geostats outputlatfield=Geo_Location outputlongfield="-" latfield=Geo_Lt longfield=Geo_Lg latest(Value) by ID

The fields Geo_Location, Geo_Lt, & Geo_lg are from a lookup table.

alt text

Tags (3)
0 Karma
1 Solution

htkwan
Path Finder

We've found a workaround: Eval ID=ID + "@" + Geo_Location

View solution in original post

0 Karma

htkwan
Path Finder

We've found a workaround: Eval ID=ID + "@" + Geo_Location

0 Karma

aljohnson_splun
Splunk Employee
Splunk Employee

Just add it to your functions:

geostats outputlatfield=Geo_Location outputlongfield="-" latfield=Geo_Lt longfield=Geo_Lg latest(Value), latest(Location) as Location by ID

Assuming, that is, that your location field is called Location

0 Karma

jeffland
SplunkTrust
SplunkTrust

What is the name of the location? Is it a field in your search?

Get Updates on the Splunk Community!

How to Get Started with Splunk Data Management Pipeline Builders (Edge Processor & ...

If you want to gain full control over your growing data volumes, check out Splunk’s Data Management pipeline ...

Out of the Box to Up And Running - Streamlined Observability for Your Cloud ...

  Tech Talk Streamlined Observability for Your Cloud Environment Register    Out of the Box to Up And Running ...

Splunk Smartness with Brandon Sternfield | Episode 3

Hello and welcome to another episode of "Splunk Smartness," the interview series where we explore the power of ...