Splunk Search

Extract fields from log message

parameshjava
Explorer

I used AOP concept to track few methods execution time and it will print the log as follows :

Execution Time : [method Name, time] : getProfiles, 1631
Execution Time : [method Name, time] : getAddress, 1500
Execution Time : [method Name, time] : getReports, 100

Is there any way to generate table/chart for each entry in log as follows:

Method Nane | Time
getProfile |1631
getAddress |1500
getReports | 100

0 Karma
1 Solution

cpetterborg
SplunkTrust
SplunkTrust

Try this:

_your_search_ | rex "] : (?P<MethodName>[^,]*),\s*(?P<Time>\d*)" | table MethodName, Time

Then you can select a visualization from the Visualization tab in the interface.

View solution in original post

cpetterborg
SplunkTrust
SplunkTrust

Try this:

_your_search_ | rex "] : (?P<MethodName>[^,]*),\s*(?P<Time>\d*)" | table MethodName, Time

Then you can select a visualization from the Visualization tab in the interface.

parameshjava
Explorer

Thanks a lot, its perfectly worked.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...