Hello,
We have some google map geo-visualizations setup that uses event count by location. I was wondering if it is possible to use other numeric fields by location(e.g., session duration or bytes).
Thank you,
Henry
Yes, you can populate the field _geo_count
manually. This value will be summed for each distinct (or merged) location and displayed in the marker.
Example:
sourcetype=access_combined | geoip clientip | stats sum(bytes) as _geo_count by _geo
Yes, you can populate the field _geo_count
manually. This value will be summed for each distinct (or merged) location and displayed in the marker.
Example:
sourcetype=access_combined | geoip clientip | stats sum(bytes) as _geo_count by _geo
Thanks that worked great!