Why is AMMap not generating the flash-based map?

I tried the steps specified on the http://www.splunk.com/base/Documentation/4.1/Developer/CreateMap documentation, but I can't seem to get the map generated for me. These are the error message I've been seeing with regards to the app:

Wed Apr 28 09:49:33 2010 - ERROR - Traceback:Traceback (most recent call last): File "C:\Program Files\Splunk\etc\apps\ammap\bin\map_results.py", line 178, in run geo_results = aggregate_threat(result_dict_list) File "C:\Program Files\Splunk\etc\apps\ammap\bin\map_results.py", line 91, in aggregate_threat key = dict["client_lon"]+dict["client_lat"] File "C:\Program Files\Splunk\Python-2.6\Lib\UserDict.py", line 22, in __getitem__ raise KeyError(key)KeyError: 'client_lon'

asked 28 Apr '10, 13:54

BunnyHop
725●4●4●23
accept rate: 25%

edited 26 May '10, 14:34

Lowell ♦
9.6k●6●35

3 Answers:

oldest newest most voted

0	This seems to be a matter of re-education. Entering the search query brings up the resulting action, and you will need to go back to the main page where the map is to see your updated map. link answered 03 May '10, 12:51 BunnyHop 725●4●4●23 accept rate: 25%

link

answered 30 Apr '10, 16:39

rroberts
1.1k●9
accept rate: 43%

Yes. I actually have the sourcetype do the lookup inline, so I don't have to run the geoip command any longer.

(30 Apr '10, 16:52) BunnyHop

have you run the search with | mapit on the end?

(30 Apr '10, 17:18) rroberts

Yes I am getting an error message it looks like.

1 INFO - Checking Intersplunk for results

2 INFO - checking for target app in search results

3 INFO - checking for output file in search results

4 INFO - aggregate_threat()

5 INFO - Aggregating results ....

6 INFO - format_threat_movies()

7 INFO - write_threat_xml()

8 C:Program FilesSplunketcappsamMapappserverstaticxml_outhome_threat_dat a.xml

9 Writing XML to : C:Program FilesSplunketcappsamMapappserverstaticxml_outhome_threat_data.xml

(30 Apr '10, 20:25) BunnyHop

By the way a new version of the app was uploaded on April 27th. http://www.splunkbase.com/apps/All/4.x/app:Splunk+for+use+with+amMap+Flash+Maps

link

answered 30 Apr '10, 18:12

rroberts
1.1k●9
accept rate: 43%

I've redownloaded this, and still the same issue. Is this working for you?

(30 Apr '10, 20:25) BunnyHop

Yes, its working for me. Running Splunk 4.1.1 MAC OS X

(30 Apr '10, 21:34) rroberts

Will try it out on my Windows box.

(30 Apr '10, 21:36) rroberts

Post your answer

toggle preview

Follow this question

Email:

RSS:

Answers

Answers + Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

error ×220
app ×206
ammap ×19
debug ×18

Asked: 28 Apr '10, 13:54

Seen: 1,009 times

Last updated: 26 May '10, 14:34

Why is AMMap not generating the flash-based map?

Follow this question

Splunk Resources

Related questions