Splunk Search

How to combine duplicate Latitude and longitude values in the stats tale of a cluster map

schalkrust
Engager

I just want to clean up my search of 'noise'as my stats table gets populated by duplicate values from the save latitude and longitude values.

index=newfortinet user=AARIBEB msg="URL belongs to a denied category in policy" direction=outgoing action=blocked
|stats sum(count) by dstip
|sort - count
|iplocation dstip
|where Country="Namibia"
|geostats count by Country globallimit=0
|fields - geobin

See attached result screanshot

alt text

Tags (1)
0 Karma

woodcock
Esteemed Legend

Just add this:

... | dedup Namibia latitude longitude
0 Karma

to4kawa
Ultra Champion
index=newfortinet user=AARIBEB msg="URL belongs to a denied category in policy" direction=outgoing action=blocked
|stats sum(count) by dstip
|sort - count
|iplocation dstip
|where Country="Namibia"
|geostats count by Country globallimit=0
|fields - geobin
|eval tmp=Namibia."_".latitude."_".longitude
|dedup tmp
|fields Namibia, latitude, longitude

Hi, @schalkrust
How about it?

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...