I have not had any experience using the Ammap app, but I did play with the way your StaticSelect was feeding the HiddenSearch and was able to get some results using either an EventsViewer or SimpleResultsTable. Of course I didn't have the same index and other search terms but I tried to edit the xml to work with your setup. Hope this can help
Travis.
<view onunloadCancelJobs="False" autoCancelInterval="100">
<!-- autoCancelInterval is set here to 100 -->
<label>Sample search</label>
<module name="AccountBar" layoutPanel="appHeader"/>
<module name="AppBar" layoutPanel="navigationHeader"/>
<module name="Message" layoutPanel="messaging">
<param name="filter">*</param>
<param name="clearOnJobDispatch">False</param>
<param name="maxSize">1</param>
</module>
<module name="StaticSelect" layoutPanel="mainSearchControls">
<param name="settingToCreate">Filter Result</param>
<param name="label">Filter</param>
<param name="selected">All</param>
<param name="searchWhenChanged">True</param>
<param name="staticFieldsToDisplay">
<list>
<param name="label">Any</param>
<param name="value">*</param>
</list>
<list>
<param name="label">OBSERVED</param>
<param name="value">OBSERVED</param>
</list>
<list>
<param name="label">DENIED</param>
<param name="value">DENIED</param>
</list>
</param>
<module name="ConvertToIntention">
<param name="settingToConvert">Filter Result</param>
<param name="intention">
<param name="name">stringreplace</param>
<param name="arg">
<param name="filter">
<param name="value">$target$</param>
</param>
</param>
</param>
<module name="HiddenSearch">
<param name="search"> index="foo" $filter$ | rename foo_ip as "ip"| search ip!=192.168* ip!=0.0.* ip!=10.* | stats count by ip | eval count_label="Event" | eval iterator="ip" | eval iterator_label="IP" | eval movie_color="#FF0000" | eval output_file="filtered_data.xml" | eval app="FOOBAR" | lookup geoip clientip as ip | mapit</param>
<param name="earliest">-2m</param>
<param name="latest">-0m</param>
<module name="EventsViewer" layoutPanel="resultsAreaLeft">
</module>
</module>
</module>
</module>
<module name="ServerSideInclude" layoutPanel="resultsAreaLeft">
<param name="src">filtered_map.html</param>
</module>
</view>
... View more