Splunk® Enterprise

Dashboards and Visualizations

Download manual as PDF

Splunk Enterprise version 7.1 will no longer be supported as of October 31, 2020. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
Download topic as PDF

Configure a choropleth map

To review or change choropleth map configuration, select the Format menu and one of the following settings panels.


Adjust general settings including initial geographic coordinates and zoom on scroll. You can also opt to hide the map legend.


Color mode and data bin settings determine how a choropleth map uses color to visualize data. Select a color mode and configure data bins in the Colors panel.

Color modes

Color mode Description and use cases Example
Categorical Color regions by category value. For example, you can track top product purchases by state. If multiple states have the same top product, they share a color.
Error creating thumbnail: File missing
Sequential Color regions with light to dark shades of a single hue. This mode helps you find regions where a metric is particularly high.
Error creating thumbnail: File missing
Divergent Color regions in light to dark shades of two distinct hues. This mode shows regions where a metric is particular high or low. Shading fades as regional metrics approach the middle of the range.
Error creating thumbnail: File missing

Data bins

Aggregated data values are divided into a set of bins. Each bin corresponds to a specific value range and has a unique color or shade. You can adjust the number of bins and bin color assignments for the selected color mode.

The choropleth map legend to the right of the map shows bins with their colors and value ranges.


A shape corresponds to an individual region on a choropleth map. For example, each state in a choropleth map of the United States is a shape. You can adjust shape opacity and borders.


Tiles represent map background features, such as oceans. Show or hide tiles.

Last modified on 07 August, 2019
Generate a choropleth map
Use IP addresses to generate a choropleth map

This documentation applies to the following versions of Splunk® Enterprise: 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.6.10, 6.6.11, 6.6.12, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13, 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters