Hi Team,
Below is my query:
index=os sourcetype=linux_mpio Firmware_Version="----------------------- DISK INFORMATION --------------------------*" host IN (r3ddclxp00003*) | dedup host
| rex max_match=0 "(?ms)^DISK\=\"(?<DISK>[^\"]+)\"\s+NAME\=\"(?<NAME>[^\"]+)\"\s+HCTL\=\"(?<HCTL>[^\"]+)\"\s+TYPE\=\"(?<TYPE>[^\"]+)\"\s+VENDOR\=\"(?<VENDOR>[^\"]+)\"\s+SIZE\=\"(?<SIZE>[^\"]+)\"\s+SCSIHOST\=\"(?<SCSIHOST>[^\"]+)\"\s+CHANNEL\=\"(?<CHANNEL>[^\"]+)\"\s+ID\=\"(?<ID>[^\"]+)\"\s+LUN\=\"(?<LUN>[^\"]+)\"\s+BOOTDISK\=\"(?<BOOTDISK>[^\"]+)\""
| stats values(_time) AS TIME, values(NAME) as "DISK NAME" , list(SIZE) AS SIZE, list(VENDOR) AS VENDOR, list(LUN) AS LUN, list(BOOTDISK) as BOOTDISK by host | appendcols [search index=os sourcetype=linux_mpio host IN (r3ddclxp00003*) Firmware_Version="------------------------- MULTIPATH STATUS ----------------------------*" | dedup host |rex max_match=0 "^(?<lines>.+)\n+" | eval first_line=mvindex(lines,2,15) | rex field=first_line "^(?<name>\w+)\s+(?<uuid>[^ ]+)" | stats list(name) AS "MPATH" , LIST(uuid) AS UUID BY host ] | table host, "DISK NAME" ,VENDOR SIZE, LUN, UUID , MPATH| rename host as Host, SIZE AS Size, "DISK NAME" AS "Disk Name", VENDOR AS Vendor, LUN AS "LUN ID"
and below is my output:
Would it be possible to add a line break for UUID and MPATH?
For example: can we use an if else condition where in IF VENDOR(1) =LSI then add a line break for UUID so that the appropriate values will be mapped...
Thanks for the help,
Ranjitha N
Please find the screenshots of sample events:
For query 2:
------------------------- MULTIPATH STATUS -----------------------------
name uuid sysfs size dm-st paths failures action path_faults vend prod rev mpatha 3624a9370b405ec36b383443d000113e6 dm-1 100G active 8 0 create 0 PURE FlashArray 8888 mpathb 3624a9370b405ec36b383443d000113e7 dm-2 300G active 8 0 create 0 PURE FlashArray 8888 mpathc 3624a9370b405ec36b383443d000113e8 dm-3 2.0T active 8 0 create 0 PURE FlashArray 8888 mpathd 3624a9370b405ec36b383443d000113e9 dm-4 1.0T active 8 0 create 0 PURE FlashArray 8888 mpathe 3624a9370b405ec36b383443d000113ea dm-5 500G active 8 0 create 0 PURE FlashArray 8888
I need to map the appropriate UUID's to the appropriate LUN ID's. For instance UUID values should be mapped to LUN ID's ranging 1-5 .
Thank You,
Ranjitha N
