Map ZipCodes without lat long

[tb5821]

My splunk event data has a mv list of zip codes that I'd like to put on a map but it looks like theres nothing out of the box to do the zip to long/lat and that I need to find a way to lookup the data?

[spayneort · Accepted solution]

The Google GeoCode app can give you the latitude and longitude for a zip code.

https://splunkbase.splunk.com/app/3597/

[tb5821]

hmm is there no way to shade things in by zip once I have the lat/lon info? I can see I can make a pie chart with a count of things at a lat/lon but I want to shade the zip codes

[woodcock]

Ask a new question. Also click Accept on the best answer (post your own if you did something different).

[woodcock]

Splunk natively supports KMZ (gzipped KML) files:
https://docs.splunk.com/Documentation/Splunk/7.2.3/Knowledge/Configuregeospatiallookups

So use this file from the US government census bureau:
https://www.census.gov/geo/maps-data/data/kml/kml_zcta.html

[woodcock]

See blog here.

https://www.splunk.com/blog/2013/07/31/zip-code-mapping.html

The main thing that you need is this file:

https://www.splunk.com/content/dam/splunk-blogs/images/2013/07/zipcode_geo.csv

[tb5821]

I saw and read that page but that csv is from 2013!! there were zips I have now that google finds that are nowhere to be found in that doc! - there's gotta be a better way.

[woodcock]

If you already know there is something obvious that doesn't work, you should add that to the details of your question.