All Apps and Add-ons

How to create a circle around a lat/lon on Splunk Map by distance

rohitmahes
New Member

Situation:
I need to create a circle of about 400km around a particular lat/lon on Splunk Maps and whenever an object which is also defined by a lat/lon enters within the area of 400km, I should be able to get an alert and view it real time and also be able to see when it leaves this particular area.

Haversine:
I was able to download the app but was not able to make it work by any means.

I would really really appreciate your input and help with this.

Thanks so much.
Rohit

0 Karma

ajayabburi508
Path Finder

Hi rohitmahes,

i need same requirement ,,

please help me for this .

thanks and regards,
ajay.

0 Karma

ajayabburi508
Path Finder

Hi rohitmahes,

i need same requirement ,

please help me for this .

thanks and regards,
ajay.

0 Karma

DalJeanis
SplunkTrust
SplunkTrust

Drawing the circle and alerting on distance from a point are two different things.

Your real time search is going to need to be calculating the distance from the center of that region every time an object of the relevant type appears/moves/changes. That is not difficult, but it could be quite resource intensive if the number of relevant objects is high, or if there is no way to eliminate far-distant objects from the search.

My suggestion is, on your base search, to kill all objects with lats or longs that are over 400Km from the center, and then calculate the actual distance only on the remaining subset.

For example, from Dallas, which is at +32.8 N +96.8 W, it might look something like

| where lat < 37 AND lat> 29 AND long < 101 AND long>93

To calculate the actual distance, you'd use something like Haversine - https://splunkbase.splunk.com/app/936/
or SA Geodistance - https://splunkbase.splunk.com/app/3232/

0 Karma

rohitmahes
New Member

Hi DalJeanis,

Making this query optimized, can be done through several means depending on the requirement.
But the primary issue is to have a circle on the map which is 350km and changes with the lat and lon that comes through the logs. I have tried haversine and cannot get that app to work. Wondering if you have ever used it might be able to shed some light on the subject. Also I have installed Shapester app which lets me draw a circle on the map of 350km. But havent been able to make that work either, as it seems to be giving me lookup errors.

Thanks

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...