How to show count on map by name of cities?

[indeed_2000]

Hi

I have table like below how can i show them on map?

spl | table city count

city  count

الریاض 10

20 جدة

مکة 33 

thanks

[gcusello]

Hi @indeed_2000,

are you speaking of georeferencing?

If this is your requirement, you need of a lookup like MaxMind (https://splunkbase.splunk.com/app/3022/#/details) to join a city name to latitude and longitude.

If instead you want to create you own lookup, follow the instructions at https://docs.splunk.com/Documentation/Splunk/latest/Viz/CreateLookup or https://docs.splunk.com/Documentation/Splunk/8.2.6/Knowledge/Configuregeospatiallookups

Ciao.

Giuseppe

[indeed_2000]

@gcusello MaxMind work if i don’t have ip?

other links seems complicated, do you have link or user guide that show step by step that how can i do this?

 Thanks 

[gcusello]

Hi @indeed_2000,

in maxmind you also have the country and the name of the city that you can use to find lat and long of your city to use in a map visualization.

Obviously you cannot use iplocation command, but you have to use the lookuyp command to associate the city name with coordinates.

Ciao.

Giuseppe