topic Re: Geographical distance calculation in Splunk Cloud (replacing haversine) in Splunk Search

Geographical distance calculation in Splunk Cloud (replacing haversine)

rcornett — Wed, 27 Jan 2021 02:34:29 GMT

Hi all,

We are currently migrating from Splunk on-premise to the Cloud. One of the apps we heavily use is haversine to calculate the distance between 2 locations.

I haven't been able to find a cloud-ready replacement for this. Just looking for recommendations on an app or solution to be able to do this in the cloud?

Cheers,

Ryan

Re: Geographical distance calculation in Splunk Cloud (replacing haversine)

bowesmana — Wed, 27 Jan 2021 03:20:47 GMT

@rcornett

I created a haversine macro (from macros.conf)

[haversine(4)] args = source_lat, source_lon, dest_lat, dest_lon definition = eval hv_rlat1 = pi()*$dest_lat$/180, hv_rlat2=pi()*$source_lat$/180, hv_rlat = pi()*($source_lat$-$dest_lat$)/180, hv_rlon= pi()*($source_lon$-$dest_lon$)/180 \ | eval hv_a = sin(hv_rlat/2) * sin(hv_rlat/2) + cos(hv_rlat1) * cos(hv_rlat2) * sin(hv_rlon/2) * sin(hv_rlon/2) \ | eval hv_c = 2 * atan2(sqrt(hv_a), sqrt(1-hv_a)) \ | eval distance = round(6371 * hv_c * 1000,0)\ | fields - hv_rlat, hv_rlat1, hv_rlat2, hv_rlon, hv_rlon1, hv_a, hv_c iseval = 0

Here's the distance from Sydney to San Francisco

Hope this helps

Re: Geographical distance calculation in Splunk Cloud (replacing haversine)

rcornett — Wed, 27 Jan 2021 04:47:20 GMT

@bowesmana awesome, thank you! I will give it ago and see if it works with our current application. Thank you 🙂

Re: Geographical distance calculation in Splunk Cloud (replacing haversine)

bowesmana — Wed, 27 Jan 2021 05:23:38 GMT

@rcornett

If it works for you, please remember to mark is as the solution, so others can make use of it