Hi There,
I have 158 events with three fields - latitude, longitude, and an integer value representing the total number of occurrences of an event at that location (latitude/longitude). I would like to plot a bubble representing the integer value at each location. I have tried the following search string:
index=testinputs | geostats latfield=latitude longfield=longitude count
The map remains blank and when I look at the statistics page, it is only returning 58 rows with duplicate entries for the same latitude/longitude combination (see the attached screenshot).
Any suggestions on how to achieve my desired result?
Thanks!
Well I feel completely silly. The data I was provided had the latitude and longitude fields reversed (i.e. the value for latitude was in the longitude field and the value for longitude was in the latitude field). So all of my points were getting plotted - except they were in Antarctica. Once I set the values correctly my points showed up in the correct locations. The search string I ended up with was:
index=testinputs | rename latitude as lon longitude as lat | geostats count as Total
Well I feel completely silly. The data I was provided had the latitude and longitude fields reversed (i.e. the value for latitude was in the longitude field and the value for longitude was in the latitude field). So all of my points were getting plotted - except they were in Antarctica. Once I set the values correctly my points showed up in the correct locations. The search string I ended up with was:
index=testinputs | rename latitude as lon longitude as lat | geostats count as Total
Try something like this
index=testinputs | geostats latfield=latitude longfield=longitude sum(total) as total