All Apps and Add-ons

Dash Board

RAYUDU_NARA
Explorer

I want to show the services names and the status of the services on one dash board.

0 Karma

niketn
Legend

@RAYUDU_NARA, can you please try the following run anywhere search based on the sample data provided?

| makeresults
| eval _raw="The profiles present in the environment are: Dmgr01,arglr2p,arglr2s,arglr2s_solr,arglr2p_solr
The total number of profiles are: 5
the profile which we are now validating is: Dmgr01
ADMU0508I: The Deployment Manager \"dmgr\" is STARTED
DMGR is Running
the profile which we are now validating is: arglr2p
ADMU0508I: The Application Server \"server1\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running
the profile which we are now validating is: arglr2s
ADMU0508I: The Application Server \"server1\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running
the profile which we are now validating is: arglr2s_solr
ADMU0508I: The Application Server \"solrServer\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running
the profile which we are now validating is: arglr2p_solr
ADMU0508I: The Application Server \"solrServer\" is STARTED
Application Server is Running
ADMU0508I: The Node Agent \"nodeagent\" is STARTED
Node Server is Running"
| rex "[^:]+:\sThe (?<ServiceType>[^\"]+)\s\"(?<Service>[^\"]+)\"\sis\s(?<Status>[^\s]+)" max_match=0
| eval data=mvzip(Service,mvzip(ServiceType,Status)) 
| fields - _raw
| fields data
| mvexpand data
| eval data=split(data,",")
| eval Service=mvindex(data,0)
| eval ServiceType=mvindex(data,1)
| eval Status=mvindex(data,2)
| fields - data
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

RAYUDU_NARA
Explorer

Thank you Niketnilay.

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...