All Apps and Add-ons

Splunk App for Jenkins: Where can I find examples about creating alerts based on job duration?

mike11339
Explorer

I'm looking for some examples on creating alerts based on job duration. Is this something that can be done with the data?

0 Karma
1 Solution

txiao_splunk
Splunk Employee
Splunk Employee

you can run search like index=jenkins_statistics event_tag=job_event type=completed job_duration>1200 earliest=-1h job_name="*"
(job_duration is measured in seconds, please customize job_duration and job_name for your needs), and then click "Save As", and select Alert
screenshot

Right now job duration is only captured for finished job, if you want to create alert for running jobs, please wait for jenkins plugin v1.4 or try the Snapshot and change the search to index=jenkins_statistics event_tag=slave job_duration earliest=-1h |fields running_builds{}.* |rename running_builds{}.* to * |search job_duration>1200 job_name="*"

View solution in original post

txiao_splunk
Splunk Employee
Splunk Employee

you can run search like index=jenkins_statistics event_tag=job_event type=completed job_duration>1200 earliest=-1h job_name="*"
(job_duration is measured in seconds, please customize job_duration and job_name for your needs), and then click "Save As", and select Alert
screenshot

Right now job duration is only captured for finished job, if you want to create alert for running jobs, please wait for jenkins plugin v1.4 or try the Snapshot and change the search to index=jenkins_statistics event_tag=slave job_duration earliest=-1h |fields running_builds{}.* |rename running_builds{}.* to * |search job_duration>1200 job_name="*"

mike11339
Explorer

The alert for running jobs is exactly what I need. Thanks for taking the time to respond and looking forward to the release of v1.4

0 Karma

txiao_splunk
Splunk Employee
Splunk Employee

1.4.1 released, please try below query

index=jenkins_statistics event_tag=job_monitor host=* earliest=-10m job_duration>3600 job_name=* |stats max(job_duration) as duration by host,build_url

Note: the data is sent every 8 minutes by default.

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

  Ready to master Kubernetes and cloud monitoring like the pros?Join Splunk’s Growth Engineering team for an ...

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...