Good Evening All, I am new to splunk and I need to a POC integrating with google maps. I appreciate any help. I have created a lookup table us_cities, configured transforms/props.conf. In fact I even have the below command resulting in the response "4 results with location information ( 4 distinct locations ) over all time" but I don't see anything plotted on the map. Also, the geo results tab shows the right lat,long retrieved from the lookup table for all the 4 locations.
| inputlookup us_cities.csv | search city="Chattanooga" | eval _geo=lat+","+long
The built-in maps are only available since version 6, so most info on the internet predates that.
If you have fields lat
and long
, you can append this to your search:
... | geostats count latfield=lat longfield=long
That will compute geo-based bins, similar to time-based bins in timechart
, for various zoom levels. Don't forget to switch the visualization to Map, and see http://docs.splunk.com/Documentation/Splunk/6.1.1/SearchReference/geostats for reference of geostats
.
Additionally, check out http://apps.splunk.com/app/1603/ for examples.
The built-in maps are only available since version 6, so most info on the internet predates that.
If you have fields lat
and long
, you can append this to your search:
... | geostats count latfield=lat longfield=long
That will compute geo-based bins, similar to time-based bins in timechart
, for various zoom levels. Don't forget to switch the visualization to Map, and see http://docs.splunk.com/Documentation/Splunk/6.1.1/SearchReference/geostats for reference of geostats
.
Additionally, check out http://apps.splunk.com/app/1603/ for examples.
This worked. Thanks Martin.
Thank you Martin, I am checking it out now.
Thanks Martin. I want to map out cities and most answers on splunk seem to point to google maps. I just started looking into geostats, any quick tips?
Have you considered using the built-in Splunk Maps?