Bonjour,
I am using a csv file with 3 columns, let's name it ct.csv, it looks like this:
Country or entitie, Indice1, indice2
France, 11,12
Canada,41,44
Kosovo,78,56
Hong Kong,32,87
........
I have applications Search and report, google maps and Lookup Editor on my splunk, the problem is my VM of my company has no internet connection, which means I cannot use google map application, so what can I do for plot a choropleth map from a csv file? Thanks
run anywhere example...
| makeresults
| eval count=25
| eval Country="France!!!Kosovo!!!United States!!!Canada!!!Hong Kong"
| makemv delim="!!!" Country
| mvexpand Country
| geom geo_countries featureIdField=Country
You have to zoom and scroll as appropriate to be able to see Kosovo and Hong Kong, but they are there.
run anywhere example...
| makeresults
| eval count=25
| eval Country="France!!!Kosovo!!!United States!!!Canada!!!Hong Kong"
| makemv delim="!!!" Country
| mvexpand Country
| geom geo_countries featureIdField=Country
You have to zoom and scroll as appropriate to be able to see Kosovo and Hong Kong, but they are there.
Can you use KMZ files?
https://www.splunk.com/blog/2015/10/01/use-custom-polygons-in-your-choropleth-maps.html
Yes, I thought the basic splunk installation came with a couple of geo files for this.
Not sure if Kosovo or Hong Kong are considered a "country" in the basic geo files, though.