All Apps and Add-ons

Dash Board

RAYUDU_NARA
Explorer

I want to show the services names and the status of the services on one dash board.

0 Karma

niketn
Legend

@RAYUDU_NARA, can you please try the following run anywhere search based on the sample data provided?

| makeresults
| eval _raw="The profiles present in the environment are: Dmgr01,arglr2p,arglr2s,arglr2s_solr,arglr2p_solr
The total number of profiles are: 5
the profile which we are now validating is: Dmgr01
ADMU0508I: The Deployment Manager \"dmgr\" is STARTED
DMGR is Running
the profile which we are now validating is: arglr2p
ADMU0508I: The Application Server \"server1\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running
the profile which we are now validating is: arglr2s
ADMU0508I: The Application Server \"server1\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running
the profile which we are now validating is: arglr2s_solr
ADMU0508I: The Application Server \"solrServer\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running
the profile which we are now validating is: arglr2p_solr
ADMU0508I: The Application Server \"solrServer\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running"
| rex "[^:]+:\sThe (?<ServiceType>[^\"]+)\s\"(?<Service>[^\"]+)\"\sis\s(?<Status>[^\s]+)" max_match=0
| eval data=mvzip(Service,mvzip(ServiceType,Status)) 
| fields - _raw
| fields data
| mvexpand data
| eval data=split(data,",")
| eval Service=mvindex(data,0)
| eval ServiceType=mvindex(data,1)
| eval Status=mvindex(data,2)
| fields - data
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

RAYUDU_NARA
Explorer

Thank you Niketnilay.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...