Splunk Dashboard Based on the Content of the Log file

Asked Jul 17 '19 at 14:02

Active Jul 17 '19 at 14:02

Viewed 92 times

My log file "app.log" contains 20-30 lines of data, example..

Total records 100. Successful batch size: 30. (Followed by some data here....)
Total records 100. Successful batch size: 40. (Followed by some data here....)
Total records 100. Successful batch size: 30. (Followed by some data here....)

I want to create a dashboard to display Total records (100) and display the sum of successful batch sizes (30+40+30) and if sum is equal to Total records need to display a green tick mark.

I am new to Splunk and I have tried to display the log data and stuck from there, can someone help me how to read and calculate? I tried with few docs in google but no luck, Thanks for your help.

asked Jul 17 '19 at 14:02

Siva

3,297
7
29
35

What have you tried so far? – RichG Jul 17 '19 at 17:19
I have created 2 fields for getting total records and batch sizes numbers...! – Siva Jul 17 '19 at 18:03
I meant what SPL have you tried? – RichG Jul 17 '19 at 23:29
Have a look at | rex if you need to extract the numbers out from the message. Then look at | stats and | eval to aggregate, visualise and compare. – Alec Collier Jul 31 '19 at 04:09

Splunk Dashboard Based on the Content of the Log file

0 Answers0