Splunk Search

Getting other interesting fields from KML geospatial lookup on choropleth map?

splunkreal
Motivator

Helo guys, how could I use other kml data like NOM_DEPT or NOM_REGION?

In this case I use the default /Placemark/name as the feature key in the splunk lookup interface.

alt text

Then add those infos on the choropleth map.

Thanks!

* If this helps, please upvote or accept solution if it solved *
0 Karma

sduchene_splunk
Splunk Employee
Splunk Employee

My GUESS is : no it's not possible,
If the goal is to enrich with region : the solution is to create a simple lookup containing the match (3 column : region, departement, dept_code, and apply this lookup before the geom command
See : https://answers.splunk.com/answers/378193/is-it-possible-to-use-a-countrycode-us-for-the-geo.html

Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...