A helper function to produce data compatible with the World Map widget. It takes either IP addresses or lat/lon as input and buckets points using a geohashing algorithm.

ParameterTypeRequiredDefault ValueDescription
ipstringoptional[a]   The field containing the IP address to look up geo-coordinates for.
latstringoptional[a]   A field containing the latitude to use for geohash bucketing.
lonstringoptional[a]   A field containing the longitude to use for geohash bucketing.
magnitudeaggregateoptional[a] count(as=_count) A function used to calculate the magnitude (weight) of each bucket. This value is used to determine the size or opacity of the world map markers.
precisionnumberoptional[a] 4 The precision to use in the calculation of the embedded geohash. Usually 4 is fine for a full globe, 12 is for a small area of zoom.

[a] Optional parameters use their default value unless explicitly set.

worldMap() Syntax Examples

Plot IP addresses on the World Map. The magnitude is the number of observations in each bucket (the default).

logscale
worldMap(ip=myIpField)

Plot existing geo-coordinates (latitude/longitude) on the World Map. The worldMap() function will automatically bucket the locations to reduce the number of points.

logscale
worldMap(lat=location.latitude, lon=location.longitude)

Plot IP addresses on the World Map and use average latency as magnitude of the points.

logscale
worldMap(ip=myIpField, magnitude=avg(latency))

worldMap() Examples

Click + next to an example below to get the full details.

Calculate Geohash Value of a Set of Coordinates

Calculate a geohash value given two fields representing latitude and longitude using the geohash() function

Query
logscale
londonLat := 51.507222
| londonLon := -0.1275
| geohash(lat=londonLat, lon=londonLon)
Introduction

In this example, the geohash() function is used to calculate the geohash values for London. Note that the values of latitude and longitude coordinates must be expressed in decimal degrees.

Step-by-Step
  1. Starting with the source repository events.

  2. logscale
    londonLat := 51.507222
    | londonLon := -0.1275
    | geohash(lat=londonLat, lon=londonLon)

    Calculates the geohash value of a set of coordinates extracted from the fields lat=londonLat and lon=londonLon, and returns the result in a field named _geohash.

  3. Event Result set.

Summary and Results

The query is used to calculate the geohash value for London (lat, lon). A geohash is used for indexing locations on maps and in databases.

You can use the worldMap() function to plot existing geo-coordinates (latitude/longitude) on the World Map by adding this to the query:

| worldMap(lat=location.latitude, lon=location.longitude)

Sample output from the incoming example data:

_geohashlondonLatlondonLon
gcpvj0e5m41551.507222-0.1275