- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dash Board
RAYUDU_NARA
Explorer
12-07-2017
12:05 AM
I want to show the services names and the status of the services on one dash board.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

niketn
Legend
12-07-2017
07:46 AM
@RAYUDU_NARA, can you please try the following run anywhere search based on the sample data provided?
| makeresults
| eval _raw="The profiles present in the environment are: Dmgr01,arglr2p,arglr2s,arglr2s_solr,arglr2p_solr
The total number of profiles are: 5
the profile which we are now validating is: Dmgr01
ADMU0508I: The Deployment Manager \"dmgr\" is STARTED
DMGR is Running
the profile which we are now validating is: arglr2p
ADMU0508I: The Application Server \"server1\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running
the profile which we are now validating is: arglr2s
ADMU0508I: The Application Server \"server1\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running
the profile which we are now validating is: arglr2s_solr
ADMU0508I: The Application Server \"solrServer\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running
the profile which we are now validating is: arglr2p_solr
ADMU0508I: The Application Server \"solrServer\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running"
| rex "[^:]+:\sThe (?<ServiceType>[^\"]+)\s\"(?<Service>[^\"]+)\"\sis\s(?<Status>[^\s]+)" max_match=0
| eval data=mvzip(Service,mvzip(ServiceType,Status))
| fields - _raw
| fields data
| mvexpand data
| eval data=split(data,",")
| eval Service=mvindex(data,0)
| eval ServiceType=mvindex(data,1)
| eval Status=mvindex(data,2)
| fields - data
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
| makeresults | eval message= "Happy Splunking!!!"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
RAYUDU_NARA
Explorer
12-11-2017
12:04 AM
Thank you Niketnilay.
