All Apps and Add-ons

Can you display a cluster map with no results?

wmeyers
Explorer

I have a dashboard that contains a Clustered Single Value Map Visualization with markers on it. It works fine when there are results for the query, but get "Error rendering Clustered Single Value Map Visualization visualization: Incorrect Fields Detected - latitude & longitude fields required" when there are no results.

Instead I would like just a map with no markers on it instead of this error. Is this possible?

0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

This is a Custom visualization, so the Viz Owner (splunk labs) would have to program the viz to make that happen.

View solution in original post

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

This is a Custom visualization, so the Viz Owner (splunk labs) would have to program the viz to make that happen.

0 Karma

wmeyers
Explorer

Since this seems to be the case, I wanted to share what I found to get around the issue in case others have the same issue. I added

    | appendpipe [stats count| eval latitude=0 |eval longitude=0 | eval title="No Results" | eval description="There were no results found with your search criteria." | where count==0 |table latitude, longitude, title, description]

This makes a single marker so that the map still shows up, and the marker will display the description when clicked on.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...