Splunk Search

Data not showing on map

rishabhpatel20
Explorer

Hello, I have lookup file uploaded and now I want to see the data, I am not able to see it on map , I can see the details in table tough , this is the query and this is the sample of output . Map is blank

| inputlookup geolocation.csv
| eval lat=tonumber(trim(latitude)), lon=tonumber(trim(longitude))
| where isnotnull(lat) AND isnotnull(lon)
| table cluster_name lat lon avg_cpu_load avg_mem_load

---------------------------------
This is the output I get 

cluster_namelatlonavg_cpu_loadavg_mem_load
ab.com63.3441204-8.267336896.8878.55
bc.com48.940162.834658755.4995.49
fg.com31.5669826129.97823521119.86




Labels (1)
Tags (3)
0 Karma

gcusello
SplunkTrust
SplunkTrust

@rishabhpatel20 ,

see the usage of geostats (https://help.splunk.com/en/splunk-enterprise/search/spl-search-reference/9.4/search-commands/geostat...) to display in a map your data.

Ciao.

Giuseppe

0 Karma

rishabhpatel20
Explorer

I see, but with this I am not able to see the data as I want, Iike I want to see the hostname on map and when point out on host it shows average CPU and memory utlization

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...