Getting Data In

Json Data not parsing properly .

chandrasekhar46
Loves-to-Learn Everything

i have json data but all the data getting in single event not parsing properly each event 
here is adding the event data. Please help what should i do to achieve in standard format in splunk

this is in splunk cloud

{"date_extract_linux":"2024-07-26 08:44:23.398743330","database": {"script_version":"1.0","global_parameters": {"check_name":"General_parameters","check_status":"OK","check_error":"","script_version":"1.0","host_name":"flosclnrhv03.pharma.aventis.com","database_name":"C2N48617","instance_name":"C2N48617","database_version":"19.0.0.0.0","database_major_version":"19","database_minor_version":"0"}, "queue_mem_check": {"check_name":"queue_mem_check","check_status":"OK","check_error":"","queue_owner":"LIVE2459_VAL","queue_name":"AQ$_Q_TASKREPORTWORKTASK_TAB_E","queue_sharable_mem":"4072"}, "queue_mem_check":  {"check_name":"queue_mem_check","check_status":"OK","check_error":"","queue_owner":"SYS","queue_name":"AQ$_ALERT_QT_E","queue_sharable_mem":"0"}, "fra_check": {"check_name":"fra_check","check_status":"OK","check_error":"","flash_in_gb":"40","flash_used_in_gb":".62","flash_reclaimable_gb":"0","percent_of_space_used":"1.56"}, "processes": {"check_name":"processes","check_status":"OK","check_error":"","process_percent":"27.3","process_current_value":"273","process_limit":"1000"}, "sessions": {"check_name":"sessions","check_status":"OK","check_error":"","sessions_percent":"16.41","sessions_current_value":"252","sessions_limit":"1536"}, "cdb_tbs_check": {"check_name":"cdb_tbs_check","check_status":"OK","check_error":"","tablespace_name":"SYSTEM","total_physical_all_mb":"65536","current_use_mb":"1355","percent_used":"2"}, "cdb_tbs_check": {"check_name":"cdb_tbs_check","check_status":"OK","check_error":"","tablespace_name":"SYSAUX","total_physical_all_mb":"65536","current_use_mb":"23606","percent_used":"36"}, "cdb_tbs_check": {"check_name":"cdb_tbs_check","check_status":"OK","check_error":"","tablespace_name":"UNDOTBS1","total_physical_all_mb":"65536","current_use_mb":"26","percent_used":"0"}, "cdb_tbs_check":  {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN2467","tablespace_name":"SYSAUX","total_physical_all_mb":"65536","current_use_mb":"627","percent_used":"1"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1S48633","tablespace_name":"SYSTEM","total_physical_all_mb":"65536","current_use_mb":"784","percent_used":"1"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN8944","tablespace_name":"SYSAUX","total_physical_all_mb":"65536","current_use_mb":"1546","percent_used":"2"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1S48633","tablespace_name":"USERS","total_physical_all_mb":"65536","current_use_mb":"1149","percent_used":"2"}, "pdb_tbs_check":  {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN8944","tablespace_name":"SYSTEM","total_physical_all_mb":"65536","current_use_mb":"705","percent_used":"1"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN8944","tablespace_name":"INDX","total_physical_all_mb":"32767","current_use_mb":"378","percent_used":"1"}, "pdb_tbs_check":  {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1S48633","tablespace_name":"USRINDEX","total_physical_all_mb":"65536","current_use_mb":"128","percent_used":"0"}, } }
Labels (3)
0 Karma

chandrasekhar46
Loves-to-Learn Everything

evevent after uploadevent after upload

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

This looks like a perfectly reasonable event to ingest whole - you should specify that it is JSON format for extraction purposes, and you can use the json_* functions to manipulate the data in your searches. Is it just that you need help to find the timestamp for the event or is Splunk already doing that correctly?

0 Karma

chandrasekhar46
Loves-to-Learn Everything

here is the raw file and i have tried this by uploading for test file but not getting events in proper format
when trying to ingest 
all data is getting on one event not as separate inside this separate objects are there 
do i need to modify the file structure or need to configure props at host level ?

{
  "date_extract_linux": "2024-07-26 08:44:23.398743330",
  "database": {
    "script_version": "1.0",
    "global_parameters": {
      "check_name": "General_parameters",
      "check_status": "OK",
      "check_error": "",
      "script_version": "1.0",
      "host_name": "flosclnrhv03.pharma.aventis.com",
      "database_name": "C2N48617",
      "instance_name": "C2N48617",
      "database_version": "19.0.0.0.0",
      "database_major_version": "19",
      "database_minor_version": "0"
    },
    "queue_mem_check": [
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_TASKREPORTWORKTASK_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_PIWORKTASK_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_LABELWORKTASK_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_PIPROCESS_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "SYS",
        "queue_name": "ALERT_QUE",
        "queue_sharable_mem": "0"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "SYS",
        "queue_name": "AQ$_ALERT_QT_E",
        "queue_sharable_mem": "0"
      }
    ],
    "fra_check": {
      "check_name": "fra_check",
      "check_status": "OK",
      "check_error": "",
      "flash_in_gb": "40",
      "flash_used_in_gb": ".62",
      "flash_reclaimable_gb": "0",
      "percent_of_space_used": "1.56"
    },
    "processes": {
      "check_name": "processes",
      "check_status": "OK",
      "check_error": "",
      "process_percent": "27.3",
      "process_current_value": "273",
      "process_limit": "1000"
    },
    "sessions": {
      "check_name": "sessions",
      "check_status": "OK",
      "check_error": "",
      "sessions_percent": "16.41",
      "sessions_current_value": "252",
      "sessions_limit": "1536"
    },
    "cdb_tbs_check": [
      {
        "check_name": "cdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "tablespace_name": "UNDOTBS1",
        "total_physical_all_mb": "65536",
        "current_use_mb": "26",
        "percent_used": "0"
      },
      {
        "check_name": "cdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "tablespace_name": "USERS",
        "total_physical_all_mb": "65536",
        "current_use_mb": "4",
        "percent_used": "0"
      }
    ],
    "pdb_tbs_check": [
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN8944",
        "tablespace_name": "USERS",
        "total_physical_all_mb": "32767",
        "current_use_mb": "1176",
        "percent_used": "4"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "UNDOTBS1",
        "total_physical_all_mb": "65536",
        "current_use_mb": "76",
        "percent_used": "0"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "TOOLS",
        "total_physical_all_mb": "65536",
        "current_use_mb": "5",
        "percent_used": "0"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN2467",
        "tablespace_name": "UNDOTBS1",
        "total_physical_all_mb": "65536",
        "current_use_mb": "22",
        "percent_used": "0"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN2467",
        "tablespace_name": "SYSAUX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "627",
        "percent_used": "1"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "SYSTEM",
        "total_physical_all_mb": "65536",
        "current_use_mb": "784",
        "percent_used": "1"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN8944",
        "tablespace_name": "SYSAUX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "1546",
        "percent_used": "2"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "SYSAUX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "7802",
        "percent_used": "12"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "USRINDEX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "128",
        "percent_used": "0"
      }
    ]
  }
}
0 Karma

PickleRick
SplunkTrust
SplunkTrust

If you want to have your array from the "queue_mem_check" field ingested as separate events I'm afraid you'll have to preprocess it with an external tool before getting this data to Splunk.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Apart from the fact that this is not quite valid JSON, what have you tried? what are you getting? what are you expecting?

0 Karma

chandrasekhar46
Loves-to-Learn Everything

i am testing this data by uploading in splunk cloud but i am not getting events in proper format
when i am selectin sourcetype as json in settings given screen shot

Screenshot_30-7-2024_125842_sanofi01.splunkcloud.com.jpeg


[
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "General_parameters",
"check_status": "OK",
"database_major_version": "19",
"database_minor_version": "0",
"database_name": "C2N48617",
"database_version": "19.0.0.0.0",
"extract_date": "30/07/2024 08:09:06",

"host_name": "flosclnrhv03.pharma.aventis.com",
"instance_name": "C2N48617",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_TASKREPORTWORKTASK_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_TASKREPORTWORKTASK_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_PIWORKTASK_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_PIWORKTASK_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_LABELWORKTASK_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_LABELWORKTASK_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_PIPROCESS_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_PIPROCESS_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "SYS",
"check_key_4": "ALERT_QUE",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "ALERT_QUE",
"queue_owner": "SYS",
"queue_sharable_mem": "0",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "SYS",
"check_key_4": "AQ$_ALERT_QT_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_ALERT_QT_E",
"queue_owner": "SYS",
"queue_sharable_mem": "0",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "fra_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"flash_in_gb": "40",
"flash_reclaimable_gb": "0",
"flash_used_in_gb": ".47",
"percent_of_space_used": "1.17",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "processes",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"process_current_value": "299",
"process_limit": "1000",
"process_percent": "29.9",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "sessions",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"script_version": "1.0",
"sessions_current_value": "299",
"sessions_limit": "1536",
"sessions_percent": "19.47"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "SYSTEM",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1355",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "2",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "SYSAUX",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "23635",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "36",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "UNDOTBS1",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "22",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "USERS",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "4",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "USERS",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "USERS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1176",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "4",
"script_version": "1.0",
"tablespace_name": "USERS",
"total_physical_all_mb": "32767"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "SYSTEM",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "784",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "SYSAUX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1549",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "2",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "USERS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1149",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "2",
"script_version": "1.0",
"tablespace_name": "USERS",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "UNDOTBS1",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "60",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "SYSAUX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "7803",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "12",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "SYSTEM",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "705",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "INDX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "378",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "INDX",
"total_physical_all_mb": "32767"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN2467",
"check_key_3": "SYSTEM",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "623",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN2467",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "AUDIT_TBS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "3",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "AUDIT_TBS",
"total_physical_all_mb": "8192"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "USRINDEX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "128",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "USRINDEX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "UNDOTBS1",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "77",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "TOOLS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "5",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "TOOLS",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN2467",
"check_key_3": "UNDOTBS1",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "24",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN2467",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN2467",
"check_key_3": "SYSAUX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "628",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN2467",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "monitoring_package",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"script_version": "1.0"
}
]
0 Karma
Get Updates on the Splunk Community!

Pro Tips for First-Time .conf Attendees: Advice from SplunkTrust

Heading to your first .Conf? You’re in for an unforgettable ride — learning, networking, swag collecting, ...

Raise Your Skills at the .conf25 Builder Bar: Your Splunk Developer Destination

Calling all Splunk developers, custom SPL builders, dashboarders, and Splunkbase app creators – the Builder ...

Hunt Smarter, Not Harder: Discover New SPL “Recipes” in Our Threat Hunting Webinar

Are you ready to take your threat hunting skills to the next level? As Splunk community members, you know the ...