remark, with a btool you will only find the public or shared saved searches from the system $SPLUNK_HOME/etc/system/(local|default)/savedsearches.conf and from the apps $SPLUNK_HOME/etc/apps/(appname)/(local|default)/savedsearches.conf If you want to find the "private" saved searched, you have to go in each profile from $SPLUNK_HOME/etc/users/(username)/(appname)/(local|default)/savedsearches.conf ... View more

At a minimum it just needs 2 columns: lat and lon Just make sure the your field names matches the value of lat_field and lon_field <div id="globe_search" class="splunk-manager" data-require="splunkjs/mvc/searchmanager" data-options='{ "search": "| inputlookup sample_geo.csv", "preview": true, "earliest_time": "0", "latest_time": "now" }'> </div> <div id="globe" class="splunk-view" data-require="app/custom_vizs/components/globe/globe" data-options='{ "managerid": "globe_search", "world_image_path": "app/custom_vizs/components/globe/world_nature.jpg", "lat_field": "lat", "lon_field": "lon", "group_by_field": { "type": "token_safe", "value": "$$grouping$$" }, "spin_speed": 1 }'> </div> ... View more

6005 & 6006 - Applies to 2012,R2, 2016,2019. ... View more