- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

pahujadeep
Explorer
01-31-2020
08:15 AM
I am working on a query where I have a data in below format:
How can I show these hub Ids on the map with their status (if they are open or closed)?
I am using Splunk Enterprise edition v 7.2.6
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
to4kawa
Ultra Champion
02-03-2020
06:18 AM
Hi, folks. how about this?
| makeresults
| eval _raw="Hub_Id,Status,Latitude,Longitude
111,Open,52.6536,2.1815
222,Close,51.27171,3.06422
333,Open,12.6536,2.1815
444,Close,22.6536,2.1815"
| multikv forceheader=1
| rename Latitude as latitude, Longitude as longitude
| eval description = "\"".Hub_Id.": ".Status."\""
| table latitude,longitude,description
Viz >> [Map+](https://splunkbase.splunk.com/app/3124/)
![Map+ Visuallization][1]
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
to4kawa
Ultra Champion
02-03-2020
06:18 AM
Hi, folks. how about this?
| makeresults
| eval _raw="Hub_Id,Status,Latitude,Longitude
111,Open,52.6536,2.1815
222,Close,51.27171,3.06422
333,Open,12.6536,2.1815
444,Close,22.6536,2.1815"
| multikv forceheader=1
| rename Latitude as latitude, Longitude as longitude
| eval description = "\"".Hub_Id.": ".Status."\""
| table latitude,longitude,description
Viz >> [Map+](https://splunkbase.splunk.com/app/3124/)
![Map+ Visuallization][1]
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

pahujadeep
Explorer
02-03-2020
06:36 AM
This is good, but won't work for since I do not have "Maps+ for Splunk" as a visualization
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

pahujadeep
Explorer
02-13-2020
09:06 AM
Well, got the Maps+ Installed and all sorted. Thank you !
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
to4kawa
Ultra Champion
02-03-2020
06:48 AM
https://splunkbase.splunk.com/app/3124/
will you download and try?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
to4kawa
Ultra Champion
02-03-2020
06:30 AM
@pahujadeep
sorry, i delete all comment.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
to4kawa
Ultra Champion
02-03-2020
06:42 AM
https://imgur.com/6cVuR1G
my sample maps+
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

pahujadeep
Explorer
02-03-2020
06:49 AM
no worries !! but thanks this is really useful. Will try to install maps+ , hope this will solve my problem
Many thanks again ! 🙂
