Hi,
I'm trying to do a simple MAP visualization with the search below, but it is throwing me error no match found. Is there any thing I'm missing out?
host = "hostname" sourcetype = "sourcetypelog" MarketName =SINGAPORE | geostats latfield=1.3667 longfield=103.8 count by MarketName
Try this
... | eval lat="1.3667" | eval lon="103.8"| geostats latfield=lat longfield=lon count by MarketName
latfield/longfield are meant to be the field names for latitude and longitude, not the field values.
Try this
... | eval lat="1.3667" | eval lon="103.8"| geostats latfield=lat longfield=lon count by MarketName
Thank you . It worked