About emilep

emilep · ‎04-22-2024

Hello, It seems that in the dashboard studio the static choropleth map has no legend. Here is the spl: index=xxxxxxxx sourcetype=yyyyyy mailgate* src=* | iplocation src | stats count by Country | geom geo_countries allFeatures=True featureIdField=Country If I put this map in a classic dashboard I get the map with the legend but in the dashboard studio no legend is showed. Is it a way to show this legend in the dashboard studio? Regards, Emile

emilep · ‎02-26-2024

Problem solved. Many thanks for your help.

emilep · ‎10-09-2023

Hi @ITWhisperer , Here it seems that transpose was not the good approach. Your solution is working as expected. Many thanks, Emile

yuanliu · ‎05-02-2023

Do you realize that by doing so, you are changing semantics of the original subsearch? Output of replace Equivalent of original subsearch (( Host_Name="srv1" AND icid="va1_icid1" OR mid="val_mid1" ) OR ( Host_Name="srv2" AND icid="va1_icid2" OR mid="val_mid2" )) (( Host_Name="srv1" AND icid="va1_icid1" AND mid="val_mid1" ) OR ( Host_Name="srv2" AND icid="va1_icid2" AND mid="val_mid2" )) and (( Host_Name="srv1" AND ( icid="va1_icid1" OR mid="val_mid1" )) OR ( Host_Name="srv2" AND ( icid="va1_icid2" OR mid="val_mid2" ))) That you need such a replacement means that the subsearch is incorrect for your purpose. Usually revising the subsearch is a better option.

Posts	8
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎12-09-2022

Online Status	Offline
Date Last Visited	‎06-21-2024 05:00 AM

Dashboard studio - choropleth map static - legend

Drill Down and conditional queries

Transpose question

Subquery - How can I modify format with multiple c...

Dashboard studio - choropleth map static - legend

Re: Drill Down and conditional queries

Re: Transpose question

Re: Subquery - modify format with multiple conditi...

Are you a member of the Splunk Community?