All Apps and Add-ons

in Choropleth Maps, how do you set feature_id_element from Placemark id?

fk319
Builder

I am using the id in the placemark for my featureIdField




I have tried in my transforms several variations:
feature_id_element = /Placemark
feature_id_element = /Placemark/id
feature_id_element = /Placemark[@id]

0 Karma
1 Solution

mporath_splunk
Splunk Employee
Splunk Employee

We don't currently support feature IDs from tag attributes. Your best bet is probably to do a manual Regex search & replace directly in the XML.

Something like this

Search: <Placemark id="(ID_[0-9]+)">
Replace: <Placemark><name>$1</name>

Hacky, but should do the trick.

Since the ID is inside the name tag, Splunk will pick it up automatically and you won't even have to set the feature_id_element for the KMZ

View solution in original post

0 Karma

mporath_splunk
Splunk Employee
Splunk Employee

We don't currently support feature IDs from tag attributes. Your best bet is probably to do a manual Regex search & replace directly in the XML.

Something like this

Search: <Placemark id="(ID_[0-9]+)">
Replace: <Placemark><name>$1</name>

Hacky, but should do the trick.

Since the ID is inside the name tag, Splunk will pick it up automatically and you won't even have to set the feature_id_element for the KMZ

0 Karma

fk319
Builder

Thank you, it gets me one step closer...

0 Karma

fk319
Builder

I have also tried, but it does not seem to help.

feature_id_element = /Placemark/@id

0 Karma

fk319
Builder

This is in greater than and less than signs. It did not copy well, even with & code.

<Placemark id="ID_00000">
0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

LIke that ^^^^?

0 Karma

fk319
Builder

yes, thanks.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...