Splunk Search

I am using geostats, I want to show multiple fields in the tooltip. Please help.

Path Finder

My current query

source="VLS_OUTSTANDING_GEO.csv" host="dev-bnk-loaniq-" sourcetype="csv" | geostats latfield=AREA_LATITUDE longfield=AREA_LONGITUDE sum(OST_AMT_FC_CURRENT) count by OST_CDE_RQST_CCY

Giving below field in snip


  • I want to show proper name instead of sum(OST_AMT_FC_CURRENT) in the tooltip.
  • I want to show the summation of the count also in the tooltip.

Like this


Also is it possible not to show the latitude & longitude in the tooltip.

Labels (1)
0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>