We have some google map geo-visualizations setup that uses event count by location. I was wondering if it is possible to use other numeric fields by location(e.g., session duration or bytes).
Yes, you can populate the field _geo_count manually. This value will be summed for each distinct (or merged) location and displayed in the marker.
sourcetype=access_combined | geoip clientip | stats sum(bytes) as _geo_count by _geo
View solution in original post
Thanks that worked great!