I am attempting to use the Clustered Single Value Map visualization (CSVM) to show a basic count of login attempts by location. Below is my search. index="onlinebanking" sourcetype="Activity" EVENTID=LOGIN | iplocation IPADDRESS | geostats latfield=lat longfield=lon count However when the map renders, the counts for the clustered values aren't even close to the statistics. The built-in Cluster Map shows the correct results, and the statistics for each search is obviously the same, but for some reason it the CSVM isn't rendering with the correct values and it's not even close. For instance CSVM will display 453 for an area, while the built-in and stats indicate 32,000. I'd really like to get to the drilled-in detail that CSVM provides, but if the values aren't accurate it doesn't do me any good. ... View more