sourcetype="CELL" dns_operator_type="电信" client_operator_type="移通"|eval _geo=lat+","+lon
when i use this search , i get"34,989 matched events"
but in google maps views , the result is
"34505 results with location information ( 103 distinct locations ) "
this is correct
... View more
At a guess, it wants the path to "Splunk" as an application, not splunk.exe as a binary, so /opt/splunk/, or c:\program files\splunk.
It's likely that the app is expecting SPLUNK_HOME to be set, so you could try running this (Windows):
C:\>set SPLUNK_HOME=c:\Program Files\Splunk
or on unix, setSplunkEnv will setup all variables:
root@server:~# . /opt/splunk/bin/setSplunkEnv
... View more