topic Re: Windows serveruptime Dashboard in Dashboards & Visualizations

Windows serveruptime Dashboard

bsaujla131984 — Sat, 18 Jan 2020 03:44:59 GMT

I would like to create a dashboard to show Windows server up time where it is more than 60 days..

Basically I would like to present as a count of servers running continuously for more than 60 days.

Re: Windows serveruptime Dashboard

to4kawa — Sat, 18 Jan 2020 04:24:42 GMT

Splunk App for Windows Infrastructure Reference

How about using it?

Re: Windows serveruptime Dashboard

bsaujla131984 — Wed, 30 Sep 2020 03:41:26 GMT

Actually I have got the search to display the servers which have been running for more than 60 days, however I am trying to get the count of servers which are running for more than 60 days..

Search to display up time is as below:-

index = win_perf host= A OR host=B OR host=C OR host=D | eval Uptime_Days = System_Up_Time/86400 | chart max(Uptime_Days) as "System Uptime in Days" by host

What I want to know the count of servers running more than 60 days ... I am trying following :-

index = win_perf host= A OR host=B OR host=C OR host=D | eval Uptime_Days = System_Up_Time/86400 | stats count by host | where Uptime_Days>60

However I am not getting any result back...

Re: Windows serveruptime Dashboard

to4kawa — Sat, 18 Jan 2020 09:22:44 GMT

amended:

|tstats count prestats=t where index=win_perf by host _time span=1d
| timechart count by host

check this results and modify query.

Re: Windows serveruptime Dashboard

bsaujla131984 — Wed, 30 Sep 2020 03:45:21 GMT

Thanks to4kawa for you reply.

It is not working for me... All I want to take the count of server which have been running for more than 60 days by using following query :-

index = win_perf host= A OR host=B OR host=C OR host=D | eval Uptime_Days = System_Up_Time/86400 | stats count by host | where Uptime_Days>60

Re: Windows serveruptime Dashboard

to4kawa — Sat, 18 Jan 2020 10:58:53 GMT

my answer is updated. please confirm.

Re: Windows serveruptime Dashboard

to4kawa — Sat, 18 Jan 2020 23:01:49 GMT

sorry, I've mistake, typo. my answer is amended. please confirm.

Re: Windows serveruptime Dashboard

bsaujla131984 — Sun, 19 Jan 2020 00:13:54 GMT

I cant find your amended answer?

Re: Windows serveruptime Dashboard

to4kawa — Sun, 19 Jan 2020 01:03:13 GMT

I put label.

Re: Windows serveruptime Dashboard

bsaujla131984 — Sun, 19 Jan 2020 02:06:54 GMT

can you copy your answer her again please?

Re: Windows serveruptime Dashboard

to4kawa — Sun, 19 Jan 2020 03:21:38 GMT

|tstats count prestats=t where index=win_perf host=A OR host=B OR host=C OR host=D by host _time span=1d
| timechart count by host

Re: Windows serveruptime Dashboard

bsaujla131984 — Sun, 19 Jan 2020 03:29:54 GMT

I am getting following error :-

Error in 'TsidxStats': WHERE clause is not an exact query

Re: Windows serveruptime Dashboard

to4kawa — Sun, 19 Jan 2020 04:29:27 GMT

my answer amended, please confirm.