Archive

Plotting error frequency to verify a break fix?

New Member

Hello, I am new to splunk and wanted to try visualizing whether a break fix that was implemented is actually working. I made a search that shows the count of errors by host:

sourcetype=st ThIsMyError | stats count by host

I was hoping to plot the error count or frequency by time to see if a configuration change made in an attempt to solve the problem is working. This chart would show error frequency (was previously once every 3-7 days) decreasing after the fix. I do not understand how to calculate and plot the changing frequency over time.

0 Karma
1 Solution

Esteemed Legend

You need the timechart command like this:

sourcetype=st ThIsMyError | timechart span=5m count by host

View solution in original post

0 Karma

Esteemed Legend

You need the timechart command like this:

sourcetype=st ThIsMyError | timechart span=5m count by host

View solution in original post

0 Karma