Requires: https://splunkbase.splunk.com/app/3511

splunk_cloudflare_live_missle_map.xml

<dashboard version="1.1" theme="dark">
  <label></label>
  <row>
    <panel>
      <viz type="missile_map.missile_map">
        <search>
          <query>| tstats count from datamodel=cloudflare.cloudflare where cloudflare.ClientCountry="*" cloudflare.ClientDeviceType="*" cloudflare.SecurityRuleID!="" cloudflare.dest_ip="*" cloudflare.dest_host="*" cloudflare.uri_path="*" cloudflare.http_user_agent="*" cloudflare.status="*" cloudflare.src_ip="*" cloudflare.OriginResponseStatus="*" cloudflare.RayID="*" cloudflare.WorkerSubrequest="*" cloudflare.http_method="*" groupby cloudflare.src_ip cloudflare.dest_ip 
| rename cloudflare.src_ip as src_ip, cloudflare.dest_ip as dest_ip 
| sort - count 
| head 999 
| dedup src_ip 
| iplocation src_ip 
| search Country != "United States" 
| rename lat as start_lat, lon as start_lon 
| fields - lat lon 
| iplocation dest_ip 
| rename lat as end_lat, lon as end_lon 
| eval end_lat = ifnull( end_lat,"33.4482"), end_lon = ifnull(end_lon,"-112.0777") 
| eval animate="true",pulse_at_start="true" 
| eval color = case(
    Country=="Ukraine","#015bbb", 
    Country=="China","#de2812", 
    Country=="Singapore", "#FF0000", 
    Country=="Netherlands", "#FFA500", 
    Country=="United Kingdom", "#012169", 
    Country=="Germany", "#FFCC00", 
    Country=="Russia", "#d52b1e", 
    Country=="Brazil", "#009c3b", 
    Country=="Canada", "#FF0000", 
    Country=="India", "#FF9933", 
    Country=="France", "#0055A4", 
    Country=="Japan", "#BC002D", 
    Country=="Philippines", "#0038A8", 
    Country=="Hong Kong", "#DE2910", 
    Country=="Vietnam", "#DA251D", 
    Country=="Ireland", "#169B62", 
    Country=="Australia", "#012169", 
    Country=="Mexico", "#006847", 
    Country=="Nigeria", "#008751", 
    Country=="Spain", "#AA151B", 
    Country=="Indonesia", "#FF0000", 
    Country=="Kenya", "#000000", 
    Country=="South Korea", "#FFFFFF", 
    Country=="Poland", "#DC143C", 
    Country=="South Africa", "#007A4D", 
    Country=="Thailand", "#A51931", 
    Country=="Pakistan", "#006600", 
    Country=="Romania", "#002B7F", 
    Country=="Turkey", "#E30A17", 
    Country=="Italy", "#009246", 
    Country=="Belgium", "#FAE042", 
    Country=="Iran", "#239F40", 
    Country=="Denmark", "#C8102E", 
    Country=="Puerto Rico", "#EF3340", 
    Country=="Sweden", "#006AA7", 
    Country=="Finland", "#003580", 
    Country=="Malaysia", "#000066", 
    Country=="Colombia", "#FCD116", 
    Country=="Ghana", "#CF0921", 
    Country=="New Zealand", "#012169", 
    Country=="Saudi Arabia", "#006C35", 
    Country=="Bulgaria", "#00966E", 
    Country=="Egypt", "#C8102E", 
    Country=="Guam", "#003C71", 
    Country=="Iraq", "#CE1126", 
    Country=="Bangladesh", "#006A4E", 
    Country=="Chile", "#DA291C", 
    Country=="Czechia", "#11457E", 
    Country=="Ethiopia", "#078930", 
    Country=="Norway", "#BA0C2F", 
    Country=="Panama", "#D91023", 
    Country=="Papua New Guinea", "#000000", 
    Country=="Peru", "#D91023", 
    Country=="Venezuela", "#FCB131", 
    Country=="Austria", "#ED2939", 
    Country=="Ecuador", "#FFDD00", 
    Country=="Greece", "#0D5EAF", 
    Country=="Jamaica", "#009B3A", 
    Country=="Jordan", "#CE1126", 
    Country=="Lithuania", "#FDB913", 
    Country=="Mauritius", "#EA2839", 
    Country=="Morocco", "#C1272D", 
    Country=="Nepal", "#DC143C", 
    Country=="Portugal", "#046A38", 
    Country=="Switzerland", "#FF0000", 
    Country=="Albania", "#E41E20", 
    Country=="Andorra", "#1C3F94", 
    Country=="Argentina", "#74ACDF", 
    Country=="Armenia", "#D90012", 
    Country=="Azerbaijan", "#0098C3", 
    Country=="Bahrain", "#CE1126", 
    Country=="Belarus", "#CF102A", 
    Country=="Benin", "#008850", 
    Country=="Cambodia", "#032EA1", 
    Country=="Dominican Republic", "#002D62", 
    Country=="Kazakhstan", "#00AFCA", 
    Country=="Kyrgyzstan", "#FF0000", 
    Country=="Malawi", "#000000", 
    Country=="Moldova", "#0047AB", 
    Country=="Mongolia", "#DA2032", 
    Country=="Oman", "#DC143C", 
    Country=="Qatar", "#8A1538", 
    Country=="Sierra Leone", "#1EB53A", 
    Country=="Taiwan", "#FE0000", 
    Country=="Trinidad and Tobago", "#E00000", 
    Country=="United Arab Emirates", "#00732F", 
    Country=="Uzbekistan", "#1EB53A", 
    Country=="Afghanistan", "#000000", 
    Country=="Aruba", "#418FDE", 
    Country=="Barbados", "#00267F", 
    Country=="Bolivia", "#DA291C", 
    Country=="Burundi", "#CE1126", 
    Country=="Costa Rica", "#00205B", 
    Country=="Croatia", "#FF0000", 
    Country=="El Salvador", "#0F47AF", 
    Country=="Fiji", "#62B5E5", 
    Country=="Gambia", "#CE1126", 
    Country=="Georgia", "#FF0000", 
    Country=="Guatemala", "#4997D0", 
    Country=="Haiti", "#00209F", 
    1==1, "#808080" 
    ) 
| eventstats sum(count) as total_count 
| eval perc = count / total_count 
| eval weight = round(perc * 20,0) 
| eval weight = if(weight=="0","1",weight) 
| eval animate = case(color= "#808080","fasle",1==1,animate), weight = case(color= "#808080","1",1==1,animate) 
| table start_lat start_lon end_lat end_lon color weight animate pulse_at_start</query>
          <earliest>-3m</earliest>
          <latest>now</latest>
          <refresh>20s</refresh>
          <refreshType>delay</refreshType>
        </search>
        <option name="drilldown">none</option>
        <option name="height">1000</option>
        <option name="missile_map.missile_map.lineThickness">1</option>
        <option name="missile_map.missile_map.mapLatitude">3</option>
        <option name="missile_map.missile_map.mapLongitude">0</option>
        <option name="missile_map.missile_map.mapZoom">3</option>
        <option name="missile_map.missile_map.staticColor">#FF0000</option>
        <option name="missile_map.missile_map.tileSet">dark_tiles</option>
        <option name="refresh.display">none</option>
      </viz>
    </panel>
  </row>
</dashboard>