Geostats Map Drilldown

[kakarsu]

I have a lookup file that contains the name, ID, Latitude and Longitude of all our branches. I have designed a map to locate all the branches on the map. I need to drilldown on-click by capturing the Branch_ID from the list and open another existing dashboard where I can see more details of that branch.

The problem I have is that I cannot select one Branch_ID. Any help? While I click on the dot on the map it opens the other dashboard and tries to search for "null" in the form. Hope I am not confusing.

[DalJeanis]

That's going to be a defined behavior in the particular map visualization that you are using - it's aggregating the individual dots/flags rather than maintaining them as individual units.

You might try the Clustered Single value map visualization and see if its behavior meets your needs. https://splunkbase.splunk.com/app/3124/

There are also a number of other map options discussed here - https://www.splunk.com/blog/2017/01/10/dashboard-digest-series-episode-5-maps.html

[kakarsu]

Thanks, unfortunately, I'm using enterprise Splunk within our industry with very limited accessibility over the config files and no privilege to add any new app to Splunk platform.

Overall all I need is to be able to click on a single point on the map, capture either the Branch_ID or branch_Name (only one) and past it to the other dashboard. I have pasted the query with drilldown code in the above comments.

Any help would be much appreciated!

Many thanks!

[naidusadanala]

Can you share your search and output ....

It helps to understand the scenario in better way

Thanks

[kakarsu]

Hi,

Below is the query I use:
|inputlookup branch_INFO |fields Branch_Number, Branch_Name, SITE_LATD, SITE_LGTD | geostats latfield=SITE_LATD longfield=SITE_LGTD count by Branch_Name globallimit=0 maxzoomlevel=18

AND

Below is the drilldown code:

      <link>https://logit/en-GB/app/PROD/branch_view?form.BranchSearch=$click.value$</link>
          <drilldown>