- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
htkwan
Path Finder
08-21-2015
09:48 AM
Hello,
I would like to provide the name of the location, besides the latitude, longitude & values. My search is:
geostats outputlatfield=Geo_Location outputlongfield="-" latfield=Geo_Lt longfield=Geo_Lg latest(Value) by ID
The fields Geo_Location, Geo_Lt, & Geo_lg are from a lookup table.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
htkwan
Path Finder
08-26-2015
11:07 PM
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
htkwan
Path Finder
08-26-2015
11:07 PM
We've found a workaround: Eval ID=ID + "@" + Geo_Location
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

aljohnson_splun

Splunk Employee
08-25-2015
01:44 AM
Just add it to your functions:
geostats outputlatfield=Geo_Location outputlongfield="-" latfield=Geo_Lt longfield=Geo_Lg latest(Value), latest(Location) as Location by ID
Assuming, that is, that your location field is called Location
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
jeffland

SplunkTrust
08-25-2015
01:37 AM
What is the name of the location? Is it a field in your search?
