Splunk Search

Google maps query not working

mholloway_uk
Explorer

I've tried everything to get the google maps app to work, but I always get the message "No geo information found in results"

I have tried the following:

sourcetype="dbmon:kv" | eval _geo=tostring(round(Latitude,3))+","+tostring(round(Longitude,3))

I have verified that the eval expression outputs the lat,long in the correct fromat e.g. "36.732,-76.353".

I have also tried hard coding the _geo field:

sourcetype="dbmon:kv" | eval _geo="47.11,0.815"

(value coped straight from the documentation). Yet still I get the same error.

Please can someone help. I'm pulling my hair out over this one!

Thanks in advance

Tags (1)
0 Karma
1 Solution

starcher
Influencer

try "| geonormalize" after you have setup your _longitude and _latitude values. I seem to recall that is what setups what the google maps app needs

View solution in original post

0 Karma

starcher
Influencer

try "| geonormalize" after you have setup your _longitude and _latitude values. I seem to recall that is what setups what the google maps app needs

0 Karma

mholloway_uk
Explorer

Thanks for your help. I had tried geonormalize with my raw data, but it didn't work which is why I tried the manual method described in the documentation. I have now got it to work by setting the Latitude and Longitude to new variables (lat and lng) that geonormalize recognises.

| eval lat=Latitude | eval lng=Longitude | geonormalize

Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...