All Apps and Add-ons

Custom Cluster Map Visualization: Why is the Clustered Mapping not specific enough and the Choropleth map wont work for me?

colinmchugo
Explorer

Hi

I have got mapping working for a query I am running by referencing a column officelocation which gives me e.g

OfficeLocation GoodCount BadCount
London 1 34
Sao Palo 22 45
Seattle 7 23
Dublin 18 19
Etc

I the office locations in an office csv with the Lat and Long in each column so this is referenced and the cluster map then maps out the number to this location. The issue is even though I ref somewhere in the middle of America it will only cluster this to we will say New York where I want the location highlighted.

sourcetype="i.csv" OR sourcetype="i.csv" OfficeLocation!="" OfficeLocation!="N/A" | lookup officegeo.csv "Office Code" as "OfficeLocation" | search UserAction!=None   | geostats  latfield=Lattitude longfield=Logitutde count by Office

I want to get the locations more specific, the lookup table looks correct but how do I do it with the other mapping type (Choropleth map) or any other method? thanks.

Colin

0 Karma

ssadh_splunk
Splunk Employee
Splunk Employee

Try this out.

Clustered Single Value Map Visualization - https://splunkbase.splunk.com/app/3124

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...