Splunk Search

Getting other interesting fields from KML geospatial lookup on choropleth map?


Helo guys, how could I use other kml data like NOM_DEPT or NOM_REGION?

In this case I use the default /Placemark/name as the feature key in the splunk lookup interface.

alt text

Then add those infos on the choropleth map.


0 Karma

Splunk Employee
Splunk Employee

My GUESS is : no it's not possible,
If the goal is to enrich with region : the solution is to create a simple lookup containing the match (3 column : region, departement, dept_code, and apply this lookup before the geom command
See : https://answers.splunk.com/answers/378193/is-it-possible-to-use-a-countrycode-us-for-the-geo.html

.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!