World Map

View as Markdown

Platform

The World Map plots every asset that has a known geographic location on an interactive globe. It is the geographic counterpart to the Network Map: where the Network Map shows logical relationships between assets, the World Map shows where in the world each asset is.

Prerequisites

The World Map shows only assets with at least one resolved location. runZero produces locations from MaxMind GeoIP lookups, cloud region centroids, integration attributes, and user-supplied geo* tags. See Geolocation for the full list of sources and how to pin an asset’s location manually.

Assets with no geolocation data stay off the map, and the View on World Map action and inventory globe icon appear only when an asset has at least one resolved location.

Accessing the map

You can open the World Map from several places in the console:

  • In the Inventory, asset rows show a small globe icon when the asset has a known location. Click the icon to open the World Map filtered to that asset.
  • In Inventory search, the “View on map” action above the inventory grid opens the World Map with the current inventory search applied as the map filter.
  • In Asset details, the Manage menu offers View on World Map (or Back to World Map if you arrived from the map). The link appears only when the asset has geolocation data.
  • In Reports, open it directly at /reports/world/map from the Reports menu, or at https://console.runzero.com/reports/world/map.
  • In Queries, saved query rows in the queries grid include a “View on World Map” action that prefills the map with the saved query.

When you open the map from the inventory or from an asset’s detail page, runZero records the previous URL as a return target. A Back button in the top-left of the map returns you to that exact view, including any filters and pagination you had set.

2D and 3D modes

The World Map has two modes:

  • The 2D World Map (/reports/world/map) is a flat projection of every asset location, optimized for searching, filtering, and exporting.
  • The 3D globe (/reports/world/map/3d) is an interactive rotating globe rendering the same point set, useful for executive and dashboard displays.

Both modes use the same data, search syntax, and filter state. To switch:

  • From the 2D map, click the 3D button in the top-right toolbar.
  • From the 3D globe, click the 2D button in the top-right toolbar.

Searching the map

The map’s search box accepts a domain-specific query language with keyword filters and free text. Type a keyword followed by a colon and a value, or start typing and press Tab to autocomplete from the current point set.

The boolean operators AND, OR, and NOT work here, along with parentheses for grouping. Bare text (no keyword) matches across all displayed fields.

Supported keywords

Keyword Aliases Matches
country ISO alpha-2 country code
city City name
state subdivision State, province, or admin subdivision
continent Continent name
asn isp ASN organization name or number
id Asset ID
name names, hostname, hostnames Asset name or any of its hostnames
addr address, addresses, ip, host Asset IP address
os Operating system
hw hardware Hardware identifier
type Asset type
category categories Asset category (IT / OT / IoT)
risk_rank risk Numeric risk rank
last_seen lastseen Last-seen timestamp
site site_name Site name
site_id Site UUID

Values with spaces or punctuation must be quoted (city:"San Francisco"). The search field auto-quotes when you accept an autocomplete suggestion.

Examples

country:US
country:US AND state:CA
city:"San Francisco" OR city:Berlin
asn:"AS15169 GOOGLE"
type:server AND country:DE
category:OT AND continent:EU
NOT country:US
"web-prod-01"

Searching the asset inventory by location

The asset inventory and services inventory accept a geo keyword (synonyms: geo_within, geo_radius) that matches assets whose geolocation is within a circular area around a point. This is the recommended way to scope inventory queries by location.

geo:<lat>,<lon>[,<radius>]
  • <lat> and <lon> are decimal degrees.
  • <radius> is optional and defaults to 50 km. Supply a number followed by km, mi, or m, for example 25km, 15mi, 5000m. Plain numbers are treated as kilometers. The radius is clamped between 1 m and 1,000 km.

Examples

geo:30.2672,-97.7431              # within 50 km of downtown Austin
geo:30.2672,-97.7431,25km         # within 25 km
geo:52.5200,13.4050,100mi         # within 100 miles of Berlin
geo_within:51.5074,-0.1278,5km    # synonym

The query matches if any of the asset’s geolocation sources falls within the circle. See Geolocation for details on how runZero builds those locations.

Exporting

The Export menu in the top-right toolbar exports the currently filtered point set in these formats:

  • CSV is a flat table of every visible asset and its location fields.
  • JSON holds full point records for programmatic use.
  • GeoJSON is a standard GeoJSON FeatureCollection, suitable for loading into GIS tools.
  • KML and KMZ are for Google Earth and compatible viewers.

Sharing a view

The Share link button copies a URL that captures the current filter, pan, zoom, and any opened asset popup. Recipients with access to the same organization see exactly the view you copied.

Updated