Hi Santhosh,
The best way for visualizing this could be the US state shape map.
You'll find an example dashboard in the HERE maps app under the following url: https://splunkhostname/en-US/app/heremaps/shapemapcustom_us
You'll find it under the menu item "Shapemap -> Other countries -> Custom Shape map US"
Your command is actually quite good already. The only issue is that your data uses state names. The shape map expects you to use state codes and put these in the "key" field and you also need a "value" field.
source="Churn_Map.csv" sourcetype="Churn_map" | eval Churn = if(Churn="True.","1","0")
| eventstats sum(Churn) as true_churn , count(Churn) as total_churn by state
| eval prop= true_churn*100 / total_churn | stats values(prop) as value by state | eval key=state
The result of the command should look like this:
| key | value |
| AL | 10 |
| | 5,769231 |
| AK | 5,769231 |
| AZ | 6,250000 |
| AR | 20 |
| CA | 26,470588 |
When you get this output try the search out in the example dashboard and you should see the color ranges applied for each state.
Hope that helps,
Pieter
... View more