topic Dew Point Calculation in Splunk Search

Dew Point Calculation

adrianrepublic — Tue, 01 Oct 2019 12:22:13 GMT

I am trying to produce or calculate the Dew Point in Celsius of data in two separate indexes.

I believe the offcial Dew point formula is Td = T - ((100 - RH)/5.)

I want to basically use this formula to produce Dew point using relative humidity on one index with temperature on another index

Re: Dew Point Calculation

to4kawa — Tue, 01 Oct 2019 12:58:12 GMT

Assuming that the measurement times at the two indexes are the same,

index=relative_humidity_index OR index=temperature_index
|stats avg(relative_humidity) as relative_humidity avg(temperature) as temperature by _time
|eval dew_point=temprature-((100-relative_humidity)/5.0)

Re: Dew Point Calculation

adrianrepublic — Wed, 30 Sep 2020 02:22:01 GMT

That nearly worked. Thanks 🙂

(index="index1" device=* customer_id=*) OR (index="weather") | stats avg(hum) as relative_humidity avg(temp) as temperature by customer_id | eval dew_point=temperature-((100-relative_humidity)/5.0)

However something which ive noticed which could be any issue is that the both indexes have a temperature but on one index its temperature(weather index) and on the other its temp(index 1). When i change it to temperature it doesnt seem to produce/include the values from the "weather" index.

I basically want the temperature from the weather index vs humidity of the index1

Re: Dew Point Calculation

richgalloway — Tue, 01 Oct 2019 15:16:13 GMT

Easily handled.

(index="index1" device= customer_id=) OR (index="weather") 
| eval temperature=coalesce(temperature, temp)
| stats avg(hum) as relative_humidity avg(temp) as temperature by customer_id 
| eval dew_point=temperature-((100-relative_humidity)/5.0)

Re: Dew Point Calculation

adrianrepublic — Fri, 04 Oct 2019 09:29:46 GMT

richgalloway that seems to have done the job 🙂 Thanks very much.