Activity Feed
- Posted Re: geostats cluster map help on Dashboards & Visualizations. 2 weeks ago
- Posted Re: geostats cluster map help on Dashboards & Visualizations. 2 weeks ago
- Posted Re: geostats cluster map help on Dashboards & Visualizations. 2 weeks ago
- Posted geostats cluster map help on Dashboards & Visualizations. 3 weeks ago
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 |
2 weeks ago
can you explain me in detail please? What issue the solution of yours will resolve?
... View more
2 weeks ago
I have the spl query with me for the pie chart(good, resetting options). Just that I have to plot this visualization with another one in the same map. Both of the queries which are to be shown together is using geostats command. Is it possible to plot 2 graphs in a map in splunk?
... View more
2 weeks ago
I have 2 concerns to address. First I will describe the first one, once its done I will describe the second one. Below is how my spl query of 1st panel looks like. eventtype="example1" OR eventtype="example2" airline="airline1" AND aircraft="aircraft1" |sort 0 _time |rex for latitude and longitude |table _time airline aircraft lon lat flight_number |streamstats current=f last(flight_number) as p_fn |eval flight_number=if(isnull(flight_number),p_fn,flight_number) |search flight_number="filghtnumber1" |geostats count latfield=lat longfield=lon This gives visualization like the below. But I want it to be shown as continuous line instead of bubbles. Is it possible to be done using any other visualization or modifying the spl query shared? I am not working for any specific geographic region.
... View more
3 weeks ago
This spl query | geostats count latfield=lat longfield=lon gives visualization as cluster map where if we zoom in we will find bubbles. But I want it to be a continuous line instead of bubbles. Is it possible to do in splunk? Also can we plot the below 2 geostats graphs within one visualization in splunk? 1.>|geostats values(Good) as Good values(Resetting) as Resetting values(Starting) as Starting values(Unknown) as Unknown values(Faulty) as Faulty latfield=lat longfield=lon 2.> | geostats count latfield=lat longfield=lon | want the visualizations to be plotted as map only and not as time based charts.
... View more