Good afternoon. I am new to Splunk and need assistance with the google maps app. I am logging postfix logs, and using MAXMIND, can create a graph with the top foreign sources which connect to our servers. This is useful when visualizing compromised accounts. I use the following search: host="smtp" source="/var/log/mail" | rex field=_raw "(? \d+.\d+.\d+.\d+)" | lookup geoip clientip as ip | search client_country="*" NOT client_country="South Africa" I would like to show these results as the top region connecting but i cannot get the google maps app to reflect the results of the search, even though the graph works fine. your assistance would be appreciated ... View more