Hi there,
You can use the CSV as a source for longitude & latitude, then pass these values to the geostats command, example:
index=[indexname] dest=[dest-ip-name] | lookup lookup.csv [CSV-IP] AS dest OUTPUT [CSV-LAT] as lat, [CSV-LONG] as long | geostats latfield=lat longfield=long count by dest
Where
[indexname] = Your index used
[dest-ip-name] = Or whatever filter you want, used for the CSV lookup, in this example an IP address
[CSV-IP] = The column name in CSV lookup for the IP address
[CSV-LAT] = The column name in CSV lookup for the latitude value
[CSV-LONG] = The column name in CSV lookup for the longitude value
... View more