Daniel Spavin
daniel@spavin.net
I am a Splunk Professional Services consultant working for JDS Australia (https://www.jds.net.au), in Melbourne Australia.
8.0, 7.3, 7.2, 7.1, 7.0, 6.6
This app is for anyone who wants an easy way to display a choropleth map without needing to know anything about KML files.
A choropleth map is a type of chart where areas are shaded in proportion to an aggregate variable that represents a geographic characteristic within each area. E.g. showing average temperature by state, or income per-capita.
Simple Maps Viz requires using a lookup that comes with the app. You can use the lookup with the | iplocation command to plot countries on the world map.
This app provides a visualization that you can use in your own apps and dashboards.
To use it in your dashboards, simply install the app, and create a search that provides the values you want to display.
A lookup comes with the app that lists all the codes for the country areas. You can either use the lookup directly, or create a new lookup using a specific map's codes.
The following fields can be used in the search: * code (required): The code for the map element being defined - e.g. "AU-VIC" for Victoria, Australia. These codes are listed in the following lookup: simple-maps-viz-lookup * value (required): The numeric value for the map element
index=web sourcetype=access_combined
| iplocation clientip
| stats count as value by Country
| lookup simple-maps-viz-lookup name as Country output code
| table code, value
Once you have selected the map you would like to use, you need to be able to associate the specific codes for each geographical region.
You can either use the global lookup: simple-maps-viz-lookup or create your own version with the required codes.
Use the Examples dashboard to see what codes are required for each map, and optionally export the list for use in your own lookup by clicking the icon at the bottom of the panel.
Tokens are generated each time you click a cell (also configurable in the Drilldowns menu). This can be useful if you want to populate another panel on the dashboard with a custom search, or link to a new dashboard with the tokens carrying across.
|Token | Value | Example|
|$row.code$ | The map element code | AU-VIC|
|$row.code$ | The map element code | AU-VIC|
|$row.value$ | The value for that map element | 12345|
|$row.name$ | The Country/Department/Territory name | Victoria|
|$row.fieldname$ | The value for field "fieldname" on the same results row as the code | 12345|
If you have a bug report or feature request, please contact daniel@spavin.net
No personally identifiable information is logged or obtained in any way through this visualization.
Send email to daniel@spavin.net
Support is not guaranteed and will be provided on a best effort basis.
This visualization uses ui.toast.com
Maps provided by amcharts.com
Icons made by Freepik from www.flaticon.com
V 1.2.0
- Minor updates for Splunkbase compatibility
Updated to JQuery 3.5.0, other minor changes to meet Splunk Cloud requirements
v1.0.1
* Initial Release
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.