All Apps and Add-ons

How to display last connection status in a chart?

Explorer

Hello, I am pretty new to splunk and not having much knowledge. Please help me

Problem Statement:
I have 3 log statements

log.info( "Connecting ..." );
log.info( "Connect or create consumer failed with exception", connectException );
log.info( "Retry connecting in {}ms ...", 1000 );

For every 10 mins 1 want to display connection status. How would I do that? I tried below and it's not working

Connecting ... | timechart count(message) by message usenull=f useother=f

Thanks in advance

0 Karma
1 Solution

Path Finder

Try

Connecting OR "Connect or create consumer failed with exception" OR "Retry connecting in"
| timechart span=10min first(message) as message

View solution in original post

Path Finder

Try

Connecting OR "Connect or create consumer failed with exception" OR "Retry connecting in"
| timechart span=10min first(message) as message

View solution in original post

Explorer

@hcheang Thanks

0 Karma