Archive2

How to pull a report of application log where DEBUG level log is enabled

Path Finder

Hi,

is there anyway to pull a report to get the data of log where DEBUG level log is enabled, based on the index and sourcetype?

I am using below query to get the data:
index=myapp sourcetype=ejb_app_logs DEBUG | eval GB=b/1024/1024/1024 | timechart span=1d sum(GB) by s useother=false

0 Karma
Reply
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes and swag!