Hi, Im having trouble getting the latitude and longitudes for a cluster map to work properly when given computer names with know coordinates. The data in the index doesnt have the lat or lon in it unfortunately. In this example I am trying to figure out a way to eval against multiple standard naming conventions to assign their latitude and longitude. If i had 5 locations with the corresponding naming conventions where xxxx is a unique identifier within those 5 location and I know the latitude and longitude of each location. How would I go about evaluating every field in the "Computer Name" column for which location it belongs to and then apply the corresponding Lat & Lon so it can be plotted on a cluster map. See below naming convention and their corresponding Lat and Lon example. Loc1xxxx: Lat 10.1010 Lon -10.10.10, Loc2xxxx: Lat 20.2020 Lon -20.2020, Loc3xxxx: Lat 30.3030 Lon -30.3030, Loc4xxxx: Lat 40.4040 Lon -40.4040, Loc5xxxx: Lat 50.5050 Lon -50.5050 For this example each location with have 5 computers for simplicity sake. Loc10001- Loc10005, etc. Here is what I have so far which will resolve the lat and lon for a single location but I am having trouble figuring out how to expand it to other locations. index="index_name" | dedup "Computer Name" | rename "Computer Name" as WKS | eval lat=if(match(WKS, "Loc1"), "10.1010", "0") | eval lon=if(match(WKS, "Loc1"), "-10.1010", "0") | geostats latfield=lat longfield=lon count
... View more
