worldMap() Query Function

A helper function to produce data compatible with the World Map widget. It takes either ip-addresses or lat/lon as input and buckets points using a geohashing algorithm.

Parameters

Name

Type

Required

Default

Description

ip

string

No

The field containing the ip-address to look up geo-coordinates for.

lat

string

No

A field containing the latitude to use for geohash bucketing.

lon

string

No

A field containing the longitude to use for geohash bucketing.

precision

number

No

4

The precision to use in the calculation of the embedded geohash. Usually 4 is fine for a full globe, 12 is for a small area of zoom.

magnitude

Aggregate

No

count(as=_count)

A function used to calculate the magnitude (weight) of each bucket. This value is used to determine the size or opacity of the world map markers.

The implied parameter is worldMap.

Examples

Plot ip-addresses on the world map. The magnitude is the number of observations in each bucket (the default).

humio
worldMap(ip=myIpField)

Plot existing geo-coordinates (latitude/longitude) on the world map. The worldmap() function will automatically bucket the locations to reduce the number of points.

humio
worldMap(lat=location.latitude, lon=location.longitude)

Plot ip addresses on the world map and use average latency as magnitude of the points.

humio
worldMap(ip=myIpField, magnitude=avg(latency))