Splunk Search

How to import "count" data into Google Maps from Summary Index

mbrunetto
Path Finder

I currently have a scheduled search
host=myhost | chart count by IP
This runs and puts the results into a summary index. So now my index has "IP=x" and "count=y" tags in it. I go to google maps app and run the following search
index=summary source="generate_index_data" | geoip
The problem is that google maps now starts "count" over again, and doesn't give accurate data for each geolocation.
Basically, the index sees that 70.82.65.74 hit 308 times, but in the google map, it shows up as hitting only once. How can I get google maps to see this value as 308?

smendiratta
New Member

Hi ,
I am also facing a similar issue . Can somebody help us out with this ?

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...