topic Re: Docker log response time metrics in Alerting

Docker log response time metrics

saireddy — Fri, 05 Nov 2021 06:03:48 GMT

Can you please help, how to construct stats metrics for the below docker logs.

ThreadID=124;ThreadIDHex=0000007c;ThreadName=[XNIO-2 task-32];Node=XXXXXX;TransID=;ConsumerSenderID=NA;URI=/getBaselinedcategorylist;ServiceName=findXXXX;TranasactionStartTime=;TransactionEndTime=2021-11-05 05:34:34.366;TotalResponseTime=;TransactionStatus=SUCCESS;Method=GET;StatusCode=200;ErrorMsg=;CaptureLocation=MicroserviceResponse;
ThreadID=124;ThreadIDHex=0000007c;ThreadName=[XNIO-2 task-32];Node=XXXXXX;TransID=;ConsumerSenderID=NA;URI=/getBaselinedcategorylist;ServiceName=findXXXX;TranasactionStartTime=2021-11-05 05:34:34.264;TransactionEndTime=;TotalResponseTime=;TransactionStatus=;Method=GET;StatusCode=;ErrorMsg=;CaptureLocation=MicroserviceRequest;

status should give transactioncount , transactionstatus, average, 90thP URI Method.

Re: Docker log response time metrics

ITWhisperer — Fri, 05 Nov 2021 06:59:48 GMT

What do you have so far?

For example, have you extracted the fields you are interested in or is that the part you need help with?

How do you know these two events are related to each other?

Has _time already been correctly extracted from the log entries for each event?

Re: Docker log response time metrics

saireddy — Fri, 05 Nov 2021 10:42:22 GMT

I tried something like this

index=docker_* source="/applogs/containers/fob*"
| rex field=source "/applogs/containers/(?<ServiceName>.*?)\."
| stats count(ThreadIDHex) as "Transaction Count" min(_time) as starttime max(_time) as endtime range(_time) as duration by ServiceName URI

Regarding how they are related, threadid and threadihex for both the logs are same.

Re: Docker log response time metrics

saireddy — Mon, 08 Nov 2021 08:56:15 GMT

Can anyone help?