Splunk Search

How can i get cpu time for each component in log files?

vasavigangana
Explorer

Hai

    i have some installation logfiles and i want to caluculate cpu time for each components(success and falied cases)...
Tags (1)
0 Karma

chimell
Motivator

Hi
Try this search code

     index="_internal" source="*metrics.log" group="pipeline" 
        | chart sum(cpu_seconds) over processor | sort -sum(cpu_seconds)
        |rename sum(cpu_seconds) as "Total CPU Seconds"
0 Karma

fdi01
Motivator

try like this:
index=_internal status=failure OR status=success |stats values(status) as status by _time

to have time of differents status .

0 Karma

NOUMSSI
Builder

Hi,
Here is the search code:

index=_internal status=failure OR status=success | timechart c by status
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...