Getting Data In

Json Data not parsing properly .

chandrasekhar46
Loves-to-Learn Everything

i have json data but all the data getting in single event not parsing properly each event 
here is adding the event data. Please help what should i do to achieve in standard format in splunk

this is in splunk cloud

{"date_extract_linux":"2024-07-26 08:44:23.398743330","database": {"script_version":"1.0","global_parameters": {"check_name":"General_parameters","check_status":"OK","check_error":"","script_version":"1.0","host_name":"flosclnrhv03.pharma.aventis.com","database_name":"C2N48617","instance_name":"C2N48617","database_version":"19.0.0.0.0","database_major_version":"19","database_minor_version":"0"}, "queue_mem_check": {"check_name":"queue_mem_check","check_status":"OK","check_error":"","queue_owner":"LIVE2459_VAL","queue_name":"AQ$_Q_TASKREPORTWORKTASK_TAB_E","queue_sharable_mem":"4072"}, "queue_mem_check":  {"check_name":"queue_mem_check","check_status":"OK","check_error":"","queue_owner":"SYS","queue_name":"AQ$_ALERT_QT_E","queue_sharable_mem":"0"}, "fra_check": {"check_name":"fra_check","check_status":"OK","check_error":"","flash_in_gb":"40","flash_used_in_gb":".62","flash_reclaimable_gb":"0","percent_of_space_used":"1.56"}, "processes": {"check_name":"processes","check_status":"OK","check_error":"","process_percent":"27.3","process_current_value":"273","process_limit":"1000"}, "sessions": {"check_name":"sessions","check_status":"OK","check_error":"","sessions_percent":"16.41","sessions_current_value":"252","sessions_limit":"1536"}, "cdb_tbs_check": {"check_name":"cdb_tbs_check","check_status":"OK","check_error":"","tablespace_name":"SYSTEM","total_physical_all_mb":"65536","current_use_mb":"1355","percent_used":"2"}, "cdb_tbs_check": {"check_name":"cdb_tbs_check","check_status":"OK","check_error":"","tablespace_name":"SYSAUX","total_physical_all_mb":"65536","current_use_mb":"23606","percent_used":"36"}, "cdb_tbs_check": {"check_name":"cdb_tbs_check","check_status":"OK","check_error":"","tablespace_name":"UNDOTBS1","total_physical_all_mb":"65536","current_use_mb":"26","percent_used":"0"}, "cdb_tbs_check":  {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN2467","tablespace_name":"SYSAUX","total_physical_all_mb":"65536","current_use_mb":"627","percent_used":"1"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1S48633","tablespace_name":"SYSTEM","total_physical_all_mb":"65536","current_use_mb":"784","percent_used":"1"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN8944","tablespace_name":"SYSAUX","total_physical_all_mb":"65536","current_use_mb":"1546","percent_used":"2"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1S48633","tablespace_name":"USERS","total_physical_all_mb":"65536","current_use_mb":"1149","percent_used":"2"}, "pdb_tbs_check":  {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN8944","tablespace_name":"SYSTEM","total_physical_all_mb":"65536","current_use_mb":"705","percent_used":"1"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN8944","tablespace_name":"INDX","total_physical_all_mb":"32767","current_use_mb":"378","percent_used":"1"}, "pdb_tbs_check":  {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1S48633","tablespace_name":"USRINDEX","total_physical_all_mb":"65536","current_use_mb":"128","percent_used":"0"}, } }
Labels (3)
0 Karma

chandrasekhar46
Loves-to-Learn Everything

evevent after uploadevent after upload

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

This looks like a perfectly reasonable event to ingest whole - you should specify that it is JSON format for extraction purposes, and you can use the json_* functions to manipulate the data in your searches. Is it just that you need help to find the timestamp for the event or is Splunk already doing that correctly?

0 Karma

chandrasekhar46
Loves-to-Learn Everything

here is the raw file and i have tried this by uploading for test file but not getting events in proper format
when trying to ingest 
all data is getting on one event not as separate inside this separate objects are there 
do i need to modify the file structure or need to configure props at host level ?

{
  "date_extract_linux": "2024-07-26 08:44:23.398743330",
  "database": {
    "script_version": "1.0",
    "global_parameters": {
      "check_name": "General_parameters",
      "check_status": "OK",
      "check_error": "",
      "script_version": "1.0",
      "host_name": "flosclnrhv03.pharma.aventis.com",
      "database_name": "C2N48617",
      "instance_name": "C2N48617",
      "database_version": "19.0.0.0.0",
      "database_major_version": "19",
      "database_minor_version": "0"
    },
    "queue_mem_check": [
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_TASKREPORTWORKTASK_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_PIWORKTASK_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_LABELWORKTASK_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_PIPROCESS_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "SYS",
        "queue_name": "ALERT_QUE",
        "queue_sharable_mem": "0"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "SYS",
        "queue_name": "AQ$_ALERT_QT_E",
        "queue_sharable_mem": "0"
      }
    ],
    "fra_check": {
      "check_name": "fra_check",
      "check_status": "OK",
      "check_error": "",
      "flash_in_gb": "40",
      "flash_used_in_gb": ".62",
      "flash_reclaimable_gb": "0",
      "percent_of_space_used": "1.56"
    },
    "processes": {
      "check_name": "processes",
      "check_status": "OK",
      "check_error": "",
      "process_percent": "27.3",
      "process_current_value": "273",
      "process_limit": "1000"
    },
    "sessions": {
      "check_name": "sessions",
      "check_status": "OK",
      "check_error": "",
      "sessions_percent": "16.41",
      "sessions_current_value": "252",
      "sessions_limit": "1536"
    },
    "cdb_tbs_check": [
      {
        "check_name": "cdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "tablespace_name": "UNDOTBS1",
        "total_physical_all_mb": "65536",
        "current_use_mb": "26",
        "percent_used": "0"
      },
      {
        "check_name": "cdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "tablespace_name": "USERS",
        "total_physical_all_mb": "65536",
        "current_use_mb": "4",
        "percent_used": "0"
      }
    ],
    "pdb_tbs_check": [
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN8944",
        "tablespace_name": "USERS",
        "total_physical_all_mb": "32767",
        "current_use_mb": "1176",
        "percent_used": "4"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "UNDOTBS1",
        "total_physical_all_mb": "65536",
        "current_use_mb": "76",
        "percent_used": "0"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "TOOLS",
        "total_physical_all_mb": "65536",
        "current_use_mb": "5",
        "percent_used": "0"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN2467",
        "tablespace_name": "UNDOTBS1",
        "total_physical_all_mb": "65536",
        "current_use_mb": "22",
        "percent_used": "0"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN2467",
        "tablespace_name": "SYSAUX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "627",
        "percent_used": "1"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "SYSTEM",
        "total_physical_all_mb": "65536",
        "current_use_mb": "784",
        "percent_used": "1"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN8944",
        "tablespace_name": "SYSAUX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "1546",
        "percent_used": "2"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "SYSAUX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "7802",
        "percent_used": "12"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "USRINDEX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "128",
        "percent_used": "0"
      }
    ]
  }
}
0 Karma

PickleRick
SplunkTrust
SplunkTrust

If you want to have your array from the "queue_mem_check" field ingested as separate events I'm afraid you'll have to preprocess it with an external tool before getting this data to Splunk.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Apart from the fact that this is not quite valid JSON, what have you tried? what are you getting? what are you expecting?

0 Karma

chandrasekhar46
Loves-to-Learn Everything

i am testing this data by uploading in splunk cloud but i am not getting events in proper format
when i am selectin sourcetype as json in settings given screen shot

Screenshot_30-7-2024_125842_sanofi01.splunkcloud.com.jpeg


[
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "General_parameters",
"check_status": "OK",
"database_major_version": "19",
"database_minor_version": "0",
"database_name": "C2N48617",
"database_version": "19.0.0.0.0",
"extract_date": "30/07/2024 08:09:06",

"host_name": "flosclnrhv03.pharma.aventis.com",
"instance_name": "C2N48617",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_TASKREPORTWORKTASK_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_TASKREPORTWORKTASK_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_PIWORKTASK_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_PIWORKTASK_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_LABELWORKTASK_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_LABELWORKTASK_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_PIPROCESS_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_PIPROCESS_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "SYS",
"check_key_4": "ALERT_QUE",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "ALERT_QUE",
"queue_owner": "SYS",
"queue_sharable_mem": "0",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "SYS",
"check_key_4": "AQ$_ALERT_QT_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_ALERT_QT_E",
"queue_owner": "SYS",
"queue_sharable_mem": "0",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "fra_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"flash_in_gb": "40",
"flash_reclaimable_gb": "0",
"flash_used_in_gb": ".47",
"percent_of_space_used": "1.17",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "processes",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"process_current_value": "299",
"process_limit": "1000",
"process_percent": "29.9",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "sessions",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"script_version": "1.0",
"sessions_current_value": "299",
"sessions_limit": "1536",
"sessions_percent": "19.47"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "SYSTEM",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1355",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "2",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "SYSAUX",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "23635",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "36",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "UNDOTBS1",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "22",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "USERS",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "4",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "USERS",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "USERS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1176",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "4",
"script_version": "1.0",
"tablespace_name": "USERS",
"total_physical_all_mb": "32767"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "SYSTEM",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "784",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "SYSAUX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1549",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "2",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "USERS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1149",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "2",
"script_version": "1.0",
"tablespace_name": "USERS",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "UNDOTBS1",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "60",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "SYSAUX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "7803",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "12",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "SYSTEM",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "705",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "INDX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "378",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "INDX",
"total_physical_all_mb": "32767"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN2467",
"check_key_3": "SYSTEM",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "623",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN2467",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "AUDIT_TBS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "3",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "AUDIT_TBS",
"total_physical_all_mb": "8192"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "USRINDEX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "128",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "USRINDEX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "UNDOTBS1",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "77",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "TOOLS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "5",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "TOOLS",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN2467",
"check_key_3": "UNDOTBS1",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "24",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN2467",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN2467",
"check_key_3": "SYSAUX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "628",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN2467",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "monitoring_package",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"script_version": "1.0"
}
]
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...