Splunk Search

How to import "count" data into Google Maps from Summary Index

mbrunetto
Path Finder

I currently have a scheduled search
host=myhost | chart count by IP
This runs and puts the results into a summary index. So now my index has "IP=x" and "count=y" tags in it. I go to google maps app and run the following search
index=summary source="generate_index_data" | geoip
The problem is that google maps now starts "count" over again, and doesn't give accurate data for each geolocation.
Basically, the index sees that 70.82.65.74 hit 308 times, but in the google map, it shows up as hitting only once. How can I get google maps to see this value as 308?

smendiratta
New Member

Hi ,
I am also facing a similar issue . Can somebody help us out with this ?

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...