Creating a choropleth map

A choropleth map, whose name comes from two Greek words meaning area/region and multitude, is a two-dimensional map where areas are designated by color shades or patterns to indicate the measured strength of a statistical indicator, such as sales per area or crime rates.

We will not cover in detail the mathematical details of how a choropleth is created, but we are fortunate that we can use Splunk to provide this effective visualization tool for us. We will create two choropleth maps to denote bookings by region and traffic by region.

Since we don't have a panel to clone from, we will create this from scratch:

1. Enter edit mode with the Edit button.
2. Click on Add Panel.
3. Select New | Choropleth Map.
4. Change Time Range to a 1 hour window under the real-time presents.
5. In Content Title, type in Traffic Choropleth.
6. Type in this Search String, which includes a geomap command and makes use of one of the two geographic lookup maps that are included by default with Splunk. The one used...