uclnj
June 20, 2018, 11:50pm
1
Our WatchGuard firewall is feeding its syslog data into Graylog. I have two extractors to pull out src and dst countries which get added to the record so each item I would like to track. I can query a subset and quick-view the data in Graylog. I’ve been trying to get Worldmap to work with the data coming out but I cannot figure out how to get the field geo_country into Worldmap to work.
Is it possible to use WorldMap for this?
uclnj
June 21, 2018, 3:03am
2
Not 100% sure how I got it working but I got it working.
I’ve updated the documentation and added some fields for mapping between the metric query and the location data. Hope that helps explain how it works:
# Worldmap Panel Plugin for Grafana
The Worldmap Panel is a tile map of the world that can be overlaid with circles representing data points from a query. It can be used with time series metrics, with geohash data from Elasticsearch or data in the Table format.
## How The Worldmap Works (Theory and Examples)
The Worldmap panel needs two sources of data:
- a location (latitude and longitude)
- data that has a link to a location
The data comes from a database query: Prometheus, InfluxDB, Graphite, Elasticsearch, MySQL etc. It can be in the Time Series format or in the Table format.
### Time Series Format
If it is in the **Time Series format** then the metric name needs to match a key from a list of locations. That key is usually a country code or city name. The list of locations can come from a file or an HTTP endpoint.
The list of locations can be provided in several ways:
show original
