Hi,
I'm trying to use a custom kmz file in Splunk (6.5.3), but I keep getting a "problem memmapping" error.
I'm using a KMZ file from google maps - It can be found at https://www.google.com/maps/d/viewer?mid=1Dv1JRTGmzlm83tBv7tb8vQcOQXY&ll=-34.166789639385996%2C143.70463756987533&z=6 (click the three dots next to the magnifying glass)
When I run this search command | stats count | eval featureId="Sydney" | eval count=10000 | geom geo_lhds I get the memmapping error. Using | stats count | eval featureId="California" | eval count=10000 | geom geo_us_states works as expected.
Here is some of the output from the search.log
05-19-2017 15:19:17.001 INFO SearchOperator:Geom - loading pipIndex named geo_lhds
05-19-2017 15:19:17.002 INFO spatial:Util - could not resolve placemark_specifier, using default path
05-19-2017 15:19:17.002 INFO spatial:Util - fullPath to spatial polygons data file: /opt/splunk/etc/users/admin/search/lookups/geo_lhd_3.kmz
05-19-2017 15:19:17.002 INFO spatial:Util - using disk index: /opt/splunk/etc/users/admin/search/lookups/geo_lhds
05-19-2017 15:19:17.002 INFO ScopedSTLock - Waiting to acquire lock for path=/opt/splunk/etc/users/admin/search/lookups/geo_lhds
05-19-2017 15:19:17.002 INFO ScopedSTLock - Lock acquired for path=/opt/splunk/etc/users/admin/search/lookups/geo_lhds 0
05-19-2017 15:19:17.002 INFO SearchOperator:Geom - did not find clipped geometry in cache for featureCollection=geo_lhds
05-19-2017 15:19:17.002 INFO SearchOperator:Geom - generalization=1.000000
05-19-2017 15:19:17.002 INFO spatial:PointInPolygonIndex - Num Keys in ray.key: 1
05-19-2017 15:19:17.002 INFO spatial:PointInPolygonIndex - Num Keys in seg.key: 0
05-19-2017 15:19:17.002 INFO spatial:PointInPolygonIndex - Num Keys in grid.key: 0
05-19-2017 15:19:17.002 INFO spatial:PointInPolygonIndex - memory mapping existing file: ray.key
05-19-2017 15:19:17.002 INFO spatial:timing:PointInPolygonIndex - memory mapped /opt/splunk/etc/users/admin/search/lookups/geo_lhds/ray.key in 0.001000 sec
05-19-2017 15:19:17.002 INFO spatial:PointInPolygonIndex - memory mapping existing file: ray.val
05-19-2017 15:19:17.002 INFO spatial:timing:PointInPolygonIndex - memory mapped /opt/splunk/etc/users/admin/search/lookups/geo_lhds/ray.val in 0.001000 sec
05-19-2017 15:19:17.002 INFO spatial:PointInPolygonIndex - memory mapping existing file: seg.key
05-19-2017 15:19:17.002 ERROR spatial:PointInPolygonIndex - Memmap failed, file len 0 : Invalid argument
05-19-2017 15:19:17.002 FATAL spatial:PointInPolygonIndex - can not read index file seg.key
05-19-2017 15:19:17.002 INFO spatial:PointInPolygonIndex - memory mapping existing file: seg.val
05-19-2017 15:19:17.002 ERROR spatial:PointInPolygonIndex - Memmap failed, file len 0 : Invalid argument
05-19-2017 15:19:17.002 FATAL spatial:PointInPolygonIndex - can not read index file seg.val
05-19-2017 15:19:17.002 INFO spatial:PointInPolygonIndex - memory mapping existing file: grid.key
05-19-2017 15:19:17.002 ERROR spatial:PointInPolygonIndex - Memmap failed, file len 0 : Invalid argument
05-19-2017 15:19:17.002 FATAL spatial:PointInPolygonIndex - can not read index file grid.key
05-19-2017 15:19:17.002 INFO spatial:PointInPolygonIndex - memory mapping existing file: grid.val
05-19-2017 15:19:17.002 ERROR spatial:PointInPolygonIndex - Memmap failed, file len 0 : Invalid argument
05-19-2017 15:19:17.002 FATAL spatial:PointInPolygonIndex - can not read index file grid.val
05-19-2017 15:19:17.002 FATAL spatial:PointInPolygonIndex - memmap failed! no valid keys and values
05-19-2017 15:19:17.002 INFO UserManager - Unwound user context: admin -> NULL
05-19-2017 15:19:17.002 ERROR DispatchThread - problem memmapping
05-19-2017 15:19:17.003 INFO UserManager - Setting user context: admin
05-19-2017 15:19:17.003 INFO UserManager - Done setting user context: NULL -> admin
05-19-2017 15:19:17.003 INFO UserManager - Unwound user context: admin -> NULL
05-19-2017 15:19:17.003 INFO DispatchManager - DispatchManager::dispatchHasFinished(id='1495171156.1629', username='admin')
05-19-2017 15:19:17.004 INFO SearchOperator:Geom - deleting PointInPolygonIndex cache for: geo_lhds
05-19-2017 15:19:17.004 INFO UserManager - Unwound user context: admin -> NULL
05-19-2017 15:19:17.005 ERROR dispatchRunner - RunDispatch::runDispatchThread threw error: problem memmapping
I suspect there is something wrong with the KMZ/KML file, but what I don't know. The only difference I can see is that the KML file in the KMZ file I downloaded from Google has spaces as indents and there no indents in the geo_us_states.kmz file. I've tried to remove those but it didn't help either.
Any help appreciated!
... View more