Splunk Search

Changing display from row to pie ? [Used for Google Map Drilldown]

sbnoobbb
Path Finder

I am working on Google map overlay, is there anyway I can change from displaying row to pie ?

alt text


sourcetype="CurrentWeatherSGMap" $WeatherID$ | stats count by current_summary | sort by count desc
Overall Weather Status
-10m@m

                 <module name="ConvertToIntention">
             <param name="settingToConvert">maps.drilldown</param>
                    <param name="intention">
                        <param name="name">stringreplace</param>
                        <param name="arg">
                            <param name="WeatherID">
                                <param name="value">$target$</param>
                            </param>
                        </param>
                    </param>


      <param name="entityName">results</param>
      <param name="count">15</param>
        <module name="SimpleResultsTable">
          <param name="entityName">results</param>
          <param name="displayRowNumbers">true</param>
          <param name="count">10</param>
          <param name="allowTransformedFieldSelect">True</param>
          <param name="drilldown">pie</param>
          <module name="Gimp"/>



          <module name="JSChart">
            <param name="width">100%</param>
            <param name="height">160px</param>
          </module>




              </module>
          </module>
          </module>
0 Karma

krugger
Communicator

Have a working Google Maps overlay working in the bluecoat app. You need MAXMIND geoip and google maps app installed. Hope it helps:


  Google Map
  index=bluecoat | geoip dest_host resolve_hostnames=true
  rt-5m
  rt
  
    roadmap,terrain,satellite
    roadmap
    true
    clusters
    m
    0.75
    0, 100, 500, 1000, 10000
    true
    500px
    on
    
      
        true
        flashtimeline
      
    
  

sbnoobbb
Path Finder

I have already plotted the things I wanted on Google map, is there anyway from the drill downs I can display a pie chart from the advance xml above?

0 Karma
Get Updates on the Splunk Community!

Splunk App for Anomaly Detection End of Life Announcment

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...