Hello all,
I have an issue trying to visualize data on a map. I don't have an extra plugin and is not a search by IP.
Now, I'm trying to get the lat and log from a lookup and count the events per country, then, visualize it on the map.
Here is my search:
index="*alerts" | dedup Alert | rename Country as country | lookup countries.csv country | rename latitude as lat | rename longitude as lon |eventstats count(Alert) as alerts by country | geostats count(alerts) by country globallimit=0
With this, I want to count number of alerts per country.
While the search is processing, it is showing all the countries (really not all, but I just miss 3) like this:
![alt text][1]
But when the search ends, it show this:
![alt text][2]
Can you help me and tell what I'm doing wrong or what is causing countries as USA or Japan to not show up on the map when the search is finished?
Thank you in advance.
[1]: /storage/temp/125232-image-1.png
[2]: /storage/temp/125233-image2.png
↧