All Apps and Add-ons

in Choropleth Maps, how do you set feature_id_element from Placemark id?

fk319
Builder

I am using the id in the placemark for my featureIdField




I have tried in my transforms several variations:
feature_id_element = /Placemark
feature_id_element = /Placemark/id
feature_id_element = /Placemark[@id]

0 Karma
1 Solution

mporath_splunk
Splunk Employee
Splunk Employee

We don't currently support feature IDs from tag attributes. Your best bet is probably to do a manual Regex search & replace directly in the XML.

Something like this

Search: <Placemark id="(ID_[0-9]+)">
Replace: <Placemark><name>$1</name>

Hacky, but should do the trick.

Since the ID is inside the name tag, Splunk will pick it up automatically and you won't even have to set the feature_id_element for the KMZ

View solution in original post

0 Karma

mporath_splunk
Splunk Employee
Splunk Employee

We don't currently support feature IDs from tag attributes. Your best bet is probably to do a manual Regex search & replace directly in the XML.

Something like this

Search: <Placemark id="(ID_[0-9]+)">
Replace: <Placemark><name>$1</name>

Hacky, but should do the trick.

Since the ID is inside the name tag, Splunk will pick it up automatically and you won't even have to set the feature_id_element for the KMZ

0 Karma

fk319
Builder

Thank you, it gets me one step closer...

0 Karma

fk319
Builder

I have also tried, but it does not seem to help.

feature_id_element = /Placemark/@id

0 Karma

fk319
Builder

This is in greater than and less than signs. It did not copy well, even with & code.

<Placemark id="ID_00000">
0 Karma

dmaislin_splunk
Splunk Employee
Splunk Employee

LIke that ^^^^?

0 Karma

fk319
Builder

yes, thanks.

0 Karma
Get Updates on the Splunk Community!

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

&#x1f5e3; You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

What's New in Splunk Observability - October 2025

What’s New?    We’re excited to announce the latest enhancements to Splunk Observability Cloud and share ...