Splunk Search

Besides latitude, longitude, and the search result values, how do I include the location name in a Splunk 6.2.5 map popup?

htkwan
Path Finder

Hello,

I would like to provide the name of the location, besides the latitude, longitude & values. My search is:

 geostats outputlatfield=Geo_Location outputlongfield="-" latfield=Geo_Lt longfield=Geo_Lg latest(Value) by ID

The fields Geo_Location, Geo_Lt, & Geo_lg are from a lookup table.

alt text

Tags (3)
0 Karma
1 Solution

htkwan
Path Finder

We've found a workaround: Eval ID=ID + "@" + Geo_Location

View solution in original post

0 Karma

htkwan
Path Finder

We've found a workaround: Eval ID=ID + "@" + Geo_Location

0 Karma

aljohnson_splun
Splunk Employee
Splunk Employee

Just add it to your functions:

geostats outputlatfield=Geo_Location outputlongfield="-" latfield=Geo_Lt longfield=Geo_Lg latest(Value), latest(Location) as Location by ID

Assuming, that is, that your location field is called Location

0 Karma

jeffland
SplunkTrust
SplunkTrust

What is the name of the location? Is it a field in your search?

Get Updates on the Splunk Community!

Announcing the Expansion of the Splunk Academic Alliance Program

The Splunk Community is more than just an online forum — it’s a network of passionate users, administrators, ...

Learn Splunk Insider Insights, Do More With Gen AI, & Find 20+ New Use Cases You Can ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...