i created a coordinate map which is feeded by geoip-src.location and the metric is count. it works so far, all nice. i see the locations of source ips on the map and counter.
what i want to archive is to display the values of geoip-src.ip.keyword within the display. currently i see count, longitude and latitude of the results:
Is it possible to see the values that were counted (the ip adresses) within that view?
May someone give me a hint to realize please!? Thanks in advance!
@MaikLinnemann if you add the Coordinate Map to a Dashboard with the Data Table visualization, if you click on one of the geo points, it'll add a filter automatically and the Data Table will show you the information you're looking for.
@MaikLinnemann apologies, I misremembered how the coordinate map adds filters, if you click the "rectangle" tool highlighted below you can draw a rectangle around your geo point to add a filter for the underlying data:
It's not as elegant as the solution I was initially proposing, but hopefully it's sufficient.
@MaikLinnemann you can either add that specific column to the "Data Table", or if you'd like to see the raw results you can add a "saved search" to the Dashboard.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.