Splunk Search

Using some besides Count in Google Maps

hgran
Explorer

Hello,

We have some google map geo-visualizations setup that uses event count by location. I was wondering if it is possible to use other numeric fields by location(e.g., session duration or bytes).

Thank you,

Henry

Tags (2)
1 Solution

ziegfried
Influencer

Yes, you can populate the field _geo_count manually. This value will be summed for each distinct (or merged) location and displayed in the marker.

Example:

sourcetype=access_combined | geoip clientip | stats sum(bytes) as _geo_count by _geo

View solution in original post

ziegfried
Influencer

Yes, you can populate the field _geo_count manually. This value will be summed for each distinct (or merged) location and displayed in the marker.

Example:

sourcetype=access_combined | geoip clientip | stats sum(bytes) as _geo_count by _geo

hgran
Explorer

Thanks that worked great!

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...