What function or command can I use for Splunk to map the latitude and longitude into corresponding timezones?

[xiangtaner]

Hi,

Currently in my data, I have latitude and longitude info for all locations around the world. Is there a way or a handy function available in Splunk to map the latitude and longitude into the corresponding timezone?

For example, as to a specific location in city of San Francisco, the time zone should be mapped to "Pacific Time Zone". Moreover, once we have the time zone mapped, could we go one step forward to get the time offset/delta to UTC? With the same example, for locations in San Francisco, the time offset to UTC is "-08:00".

Thank you!

[xiangtaner · Accepted solution]

Thanks for all the help and responses! Thought Splunk has a built-in function. But I finally did it outside of Splunk using R and google timezone API call. http://stackoverflow.com/questions/23414340/convert-to-local-time-zone-using-latitude-and-longitude

Best,

[aaraneta_splunk]

Hi @xiangtaner - If you came up with the answer to your question, be sure to resolve your post by clicking "Accept" directly below your answer. Thank you!

[martin_mueller]

The Splunk function you're looking for is a geospatial lookup: http://docs.splunk.com/Documentation/Splunk/6.4.3/Knowledge/Configuregeospatiallookups

For that to work you'll need a KMZ file with the timezone shapes... with a quick googling I only found a shapefile at http://efele.net/maps/tz/world/ - that can easily be converted to KMZ: http://blogs.splunk.com/2015/10/01/use-custom-polygons-in-your-choropleth-maps/ (option 2)

[MuS]

Hi xiangtaner,

you can download a free timezone database as csv file here https://timezonedb.com/download and use it as lookup in Splunk.

Hope this helps ...

cheers, MuS