Using simple XML dashboard. Is there a way to show the City name in the pop-up window instead of longitude and latitude (see image)
Dashboard xml:
<map>
<title>Successful connections</title>
<searchString>index=auth_application | iplocation src_ip | geostats count(src_ip), dc(src_ip)</searchString>
<earliestTime>$earliest$</earliestTime>
<latestTime>$latest$</latestTime>
</map>
i can help you iN a way to eliminate Longitude and latidue field in the map...try uploading this css in the dashboard.css file for the particular app AND those lat and long fields will be vanished.
div.leaflet-popup-content tr:first-child {
display: none;
}
div.leaflet-popup-content tr:nth-child(2) {
display: none;
}
try this xml code
<map>
<title>Successful connections</title>
<searchString>index=auth_application | iplocation src_ip | geostats count(src_ip) , dc(src_ip) by city </searchString>
<earliestTime>$earliest$</earliestTime>
<latestTime>$latest$</latestTime>
</map>
This may not be the prettiest option, but you can amend your geostats
call like this:
... | geostats count by City
That should still retain the latitude and longitude for that specific geobucket, but will colour the pie according to City and list them in the popup.
Using your answer provides the City and Count in an easy to read format, results:
City: Count
Anaheim 1
Apple Valley 2
etc
FYI - I tried showing both count and distinct count..Not easy to read
...| geostats count, dc by City
Results:
count: CityA #
count: CityB #
dc: CityA #
dc: CityB #