Splunk Search

How to show table data on map using latitude & longitude?

pahujadeep
Explorer

I am working on a query where I have a data in below format:

alt text

How can I show these hub Ids on the map with their status (if they are open or closed)?

I am using Splunk Enterprise edition v 7.2.6

0 Karma
1 Solution

to4kawa
Ultra Champion
Hi, folks. how about this?

    | makeresults 
    | eval _raw="Hub_Id,Status,Latitude,Longitude
        111,Open,52.6536,2.1815
        222,Close,51.27171,3.06422
        333,Open,12.6536,2.1815
        444,Close,22.6536,2.1815" 
    | multikv forceheader=1 
    | rename Latitude as latitude, Longitude as longitude 
    | eval description = "\"".Hub_Id.": ".Status."\"" 
    | table latitude,longitude,description
Viz >> [Map+](https://splunkbase.splunk.com/app/3124/)
![Map+ Visuallization][1]

map_plus

View solution in original post

to4kawa
Ultra Champion
Hi, folks. how about this?

    | makeresults 
    | eval _raw="Hub_Id,Status,Latitude,Longitude
        111,Open,52.6536,2.1815
        222,Close,51.27171,3.06422
        333,Open,12.6536,2.1815
        444,Close,22.6536,2.1815" 
    | multikv forceheader=1 
    | rename Latitude as latitude, Longitude as longitude 
    | eval description = "\"".Hub_Id.": ".Status."\"" 
    | table latitude,longitude,description
Viz >> [Map+](https://splunkbase.splunk.com/app/3124/)
![Map+ Visuallization][1]

map_plus

pahujadeep
Explorer

This is good, but won't work for since I do not have "Maps+ for Splunk" as a visualization

0 Karma

pahujadeep
Explorer

Well, got the Maps+ Installed and all sorted. Thank you !

0 Karma

to4kawa
Ultra Champion

https://splunkbase.splunk.com/app/3124/

will you download and try?

0 Karma

to4kawa
Ultra Champion

@pahujadeep
sorry, i delete all comment.

0 Karma

to4kawa
Ultra Champion

https://imgur.com/6cVuR1G
my sample maps+

0 Karma

pahujadeep
Explorer

no worries !! but thanks this is really useful. Will try to install maps+ , hope this will solve my problem

Many thanks again ! 🙂

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

🍂 Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...

Transform your security operations with Splunk Enterprise Security

Hi Splunk Community, Splunk Platform has set a great foundation for your security operations. With the ...

Splunk Admins and App Developers | Earn a $35 gift card!

Splunk, in collaboration with ESG (Enterprise Strategy Group) by TechTarget, is excited to announce a ...