All Apps and Add-ons

Splunk App for Jenkins: Where can I find examples about creating alerts based on job duration?

mike11339
Explorer

I'm looking for some examples on creating alerts based on job duration. Is this something that can be done with the data?

0 Karma
1 Solution

txiao_splunk
Splunk Employee
Splunk Employee

you can run search like index=jenkins_statistics event_tag=job_event type=completed job_duration>1200 earliest=-1h job_name="*"
(job_duration is measured in seconds, please customize job_duration and job_name for your needs), and then click "Save As", and select Alert
screenshot

Right now job duration is only captured for finished job, if you want to create alert for running jobs, please wait for jenkins plugin v1.4 or try the Snapshot and change the search to index=jenkins_statistics event_tag=slave job_duration earliest=-1h |fields running_builds{}.* |rename running_builds{}.* to * |search job_duration>1200 job_name="*"

View solution in original post

txiao_splunk
Splunk Employee
Splunk Employee

you can run search like index=jenkins_statistics event_tag=job_event type=completed job_duration>1200 earliest=-1h job_name="*"
(job_duration is measured in seconds, please customize job_duration and job_name for your needs), and then click "Save As", and select Alert
screenshot

Right now job duration is only captured for finished job, if you want to create alert for running jobs, please wait for jenkins plugin v1.4 or try the Snapshot and change the search to index=jenkins_statistics event_tag=slave job_duration earliest=-1h |fields running_builds{}.* |rename running_builds{}.* to * |search job_duration>1200 job_name="*"

mike11339
Explorer

The alert for running jobs is exactly what I need. Thanks for taking the time to respond and looking forward to the release of v1.4

0 Karma

txiao_splunk
Splunk Employee
Splunk Employee

1.4.1 released, please try below query

index=jenkins_statistics event_tag=job_monitor host=* earliest=-10m job_duration>3600 job_name=* |stats max(job_duration) as duration by host,build_url

Note: the data is sent every 8 minutes by default.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...