I'm trying to configure a real-time dashboard using the Google Maps application. I'm able to get the application working with a defined time period but this is taking too long to render the results.
I think I nearly have the required XML but the last problem is the results are never displayed on the map. Any help? Here's the XML.
<?xml version="1.0"?>
<view template="dashboard.html" refresh="60">
<label>Geographical Location of Visitors</label>
<module name="TitleBar" layoutPanel="viewHeader">
<param name="actionsMenuFilter">dashboard</param>
</module>
<module name="GenericHeader" layoutPanel="panel_row1_col1" autoRun="True">
<param name="label">Geographical Location</param>
<module name="HiddenSearch" group="Map View" autoRun="True" layout_panel="panel_row1_col1">
<param name="search">source=/opt/shoppingsite/work/logs/access_log | geoip</param>
<param name="earliest">rt-5m</param>
<param name="latest">rt</param>
<module name="EnablePreview">
<param name="enable">true</param>
<param name="display">false</param>
<module name="GoogleMaps">
<param name="autoPostProcess">false</param>
<param name="height">950px</param>
<param name="mapType">terrain</param>
<param name="mapTypeControl">on</param>
<param name="navigationControl">on</param>
<param name="scaleControl">on</param>
<param name="scrollwheel">off</param>
<param name="zoomLevel">3</param>
</module>
</module>
</module>
</module>
</view>
You could try it with a more efficient search (Assuming there is a clientip field in the source you're querying):
<view template="dashboard.html">
<label>Geographical Location of Visitors</label>
<module name="TitleBar" layoutPanel="viewHeader">
<param name="actionsMenuFilter">dashboard</param>
</module>
<module name="GenericHeader" layoutPanel="panel_row1_col1" autoRun="True">
<param name="label">Geographical Location</param>
<module name="HiddenSearch" group="Map View" autoRun="True" layout_panel="panel_row1_col1">
<param name="search">host=tuvok sourcetype=access_combined | fields clientip | geoip clientip | stats count as _geo_count by _lat,_lng</param>
<param name="earliest">rt-15m</param>
<param name="latest">rt</param>
<module name="GoogleMaps">
<param name="autoPostProcess">false</param>
<param name="height">950px</param>
<param name="mapType">terrain</param>
<param name="mapTypeControl">on</param>
<param name="navigationControl">on</param>
<param name="scaleControl">on</param>
<param name="scrollwheel">off</param>
<param name="zoomLevel">3</param>
</module>
</module>
</module>
</view>
You could try it with a more efficient search (Assuming there is a clientip field in the source you're querying):
<view template="dashboard.html">
<label>Geographical Location of Visitors</label>
<module name="TitleBar" layoutPanel="viewHeader">
<param name="actionsMenuFilter">dashboard</param>
</module>
<module name="GenericHeader" layoutPanel="panel_row1_col1" autoRun="True">
<param name="label">Geographical Location</param>
<module name="HiddenSearch" group="Map View" autoRun="True" layout_panel="panel_row1_col1">
<param name="search">host=tuvok sourcetype=access_combined | fields clientip | geoip clientip | stats count as _geo_count by _lat,_lng</param>
<param name="earliest">rt-15m</param>
<param name="latest">rt</param>
<module name="GoogleMaps">
<param name="autoPostProcess">false</param>
<param name="height">950px</param>
<param name="mapType">terrain</param>
<param name="mapTypeControl">on</param>
<param name="navigationControl">on</param>
<param name="scaleControl">on</param>
<param name="scrollwheel">off</param>
<param name="zoomLevel">3</param>
</module>
</module>
</module>
</view>
Please accept the answers if it solved your problem
Well that took my search time from 2:50 to about 20 seconds so that will do nicely. Thanks, ziegfied.