Dashboards & Visualizations

how to the utilization of a particular app or a view in app in splunk

lahariveerlapat
Explorer

can we know the utilization of a particular app in splunk or a view in app.please let me know if any solution is available.

Tags (2)
0 Karma

MuS
SplunkTrust
SplunkTrust

Hi lahariveerlapati,

If I understand your request correctly you want to get an overview how often your apps were used/called - correct?
If so, you can use a simple query like this:

index=_internal source=*access.log */app/* | rex "\/app\/(?<myApp>\w+)\/(?<myView>\w+)\"" | timechart count values(myApp) AS myApps values(myView) AS myViews

to get a nice overview of the apps & view usage. This presupposes that you have read permission on the _internal index and it is available for all of your search heads abd all of your Apps and views contain only word character ( the regex match \w ).

hope this helps ...

cheers, MuS

lahariveerlapat
Explorer

Thank you for the reply.Can we get the same for the Django Views also?

0 Karma
Get Updates on the Splunk Community!

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...