Which command is used to create choropleth maps?

The `geostats` command computes statistical aggregations for latitude and longitude coordinate data to produce cluster maps, not choropleth maps with polygon-shaded regions.

The `cluster` command is used for event clustering and anomaly detection in Splunk and has no capability to generate any type of geographic map visualization.

The `geom` command adds geographic polygon data such as country or state boundaries to search results, enabling Splunk to render choropleth maps where regions are shaded based on a statistical value. It is specifically designed for map-based visualizations that color geographic polygon areas rather than plotting individual coordinates.