Splunk Search

How can i get cpu time for each component in log files?

vasavigangana
Explorer

Hai

    i have some installation logfiles and i want to caluculate cpu time for each components(success and falied cases)...
Tags (1)
0 Karma

chimell
Motivator

Hi
Try this search code

     index="_internal" source="*metrics.log" group="pipeline" 
        | chart sum(cpu_seconds) over processor | sort -sum(cpu_seconds)
        |rename sum(cpu_seconds) as "Total CPU Seconds"
0 Karma

fdi01
Motivator

try like this:
index=_internal status=failure OR status=success |stats values(status) as status by _time

to have time of differents status .

0 Karma

NOUMSSI
Builder

Hi,
Here is the search code:

index=_internal status=failure OR status=success | timechart c by status
0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...