How to search a area based on a given lat/lon

[meenal901]

Hi,

I have a requirement - the user will enter a lat,lon in the filter and expects Splunk to search the "nearby 10km" area on the geomap based on the entered latitude longitude. I looked at the Haversine app but while installing got: There was an error processing the upload.

Any ideas?

[lakshman239 · Accepted solution]

If you trying to install the 'havesine' app via splunk GUI and getting "There was an error processing the upload.Invalid app contents: archive contains more than one immediate subdirectory: and .haversine" error, this indicates that the folders have ".*" files which are being stopped by GUI.

You can download the app to a PC or a linux server and run the command :
1. extract the app using tar -zxvf haversine.tar.gz
2. find haversine/ -type f -name ".*" -print0 to see all "." files. [ there is a .haveshine file as well, which needs to be removed]
3. delete all the "." files and recreate the tar.gz file and try to install via the GUI or move the app to etc/apps and restart the splunk.

As far as I am aware, we only have havershine app which can give you the distance which you need for a given coordinates. Hope this helps.