Splunk Search

Forced to skip results in geostats due to invalid latitude/longitude count='20'

analiaeg
Explorer

I'm running the next query in my Splunk:

index="traffic_violations_index"
| geostats latfield=Latitude longfield=Longitude count by arrest_type

Results are shown in a map correctly, but there is the next warn in my dashboard: "Forced to skip results in geostats due to invalid latitude/longitude count='20'"

Does anybody know how to avoid this warn? I don't find anything about it in splunk docs.

Thanks in advance.

0 Karma

dhirendra761
Contributor

It may be due to incorrect value of long or lat . Try to use ->This app will be helpful:
https://splunkbase.splunk.com/app/3124/

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...