Splunk Search

plot numeric value in a field on a google map

melonman
Motivator

Hi

I am trying to plot numeric value in a field on a google map.
I can show the count of a field, but can not figure out how to show the value in field.

e.g. results of intermediate search look like this:

    myField lat         lng
1   0.0810  34.730268   136.508594
2   0.0660  35.021279   135.755635
3   0.080   33.249322   130.298799
4   0.065   34.691304   135.182995
5   0.0640  43.064278   141.346785

and plot value in myField on _geo=lat,lng.
Can anyone know how to do this?

Thanks,

Tags (2)
0 Karma
1 Solution

sdaniels
Splunk Employee
Splunk Employee

Once you have Google Maps installed in Splunk you'll just need to do the following:

 <your search> | eval _geo_count = tonumber(trim(myField)) |  eval _geo = latitude+","+longitude

You set _geo for the lat/long and _geo_count for the value. In the above example I am converting myField to a number. You might not need that.

... | eval _geo_count = myField | ... 

View solution in original post

sdaniels
Splunk Employee
Splunk Employee

Once you have Google Maps installed in Splunk you'll just need to do the following:

 <your search> | eval _geo_count = tonumber(trim(myField)) |  eval _geo = latitude+","+longitude

You set _geo for the lat/long and _geo_count for the value. In the above example I am converting myField to a number. You might not need that.

... | eval _geo_count = myField | ... 

melonman
Motivator

Thanks!

Only thing is _geo_count needs to be int, so in my case value * 1000 will do the job. Now I can plot many kind of data, like temperature, pressure, etc...

I hope _geo_count can handle other number/text format as well.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...