Getting Data In

Json Data not parsing properly .

chandrasekhar46
Loves-to-Learn Everything

i have json data but all the data getting in single event not parsing properly each event 
here is adding the event data. Please help what should i do to achieve in standard format in splunk

this is in splunk cloud

{"date_extract_linux":"2024-07-26 08:44:23.398743330","database": {"script_version":"1.0","global_parameters": {"check_name":"General_parameters","check_status":"OK","check_error":"","script_version":"1.0","host_name":"flosclnrhv03.pharma.aventis.com","database_name":"C2N48617","instance_name":"C2N48617","database_version":"19.0.0.0.0","database_major_version":"19","database_minor_version":"0"}, "queue_mem_check": {"check_name":"queue_mem_check","check_status":"OK","check_error":"","queue_owner":"LIVE2459_VAL","queue_name":"AQ$_Q_TASKREPORTWORKTASK_TAB_E","queue_sharable_mem":"4072"}, "queue_mem_check":  {"check_name":"queue_mem_check","check_status":"OK","check_error":"","queue_owner":"SYS","queue_name":"AQ$_ALERT_QT_E","queue_sharable_mem":"0"}, "fra_check": {"check_name":"fra_check","check_status":"OK","check_error":"","flash_in_gb":"40","flash_used_in_gb":".62","flash_reclaimable_gb":"0","percent_of_space_used":"1.56"}, "processes": {"check_name":"processes","check_status":"OK","check_error":"","process_percent":"27.3","process_current_value":"273","process_limit":"1000"}, "sessions": {"check_name":"sessions","check_status":"OK","check_error":"","sessions_percent":"16.41","sessions_current_value":"252","sessions_limit":"1536"}, "cdb_tbs_check": {"check_name":"cdb_tbs_check","check_status":"OK","check_error":"","tablespace_name":"SYSTEM","total_physical_all_mb":"65536","current_use_mb":"1355","percent_used":"2"}, "cdb_tbs_check": {"check_name":"cdb_tbs_check","check_status":"OK","check_error":"","tablespace_name":"SYSAUX","total_physical_all_mb":"65536","current_use_mb":"23606","percent_used":"36"}, "cdb_tbs_check": {"check_name":"cdb_tbs_check","check_status":"OK","check_error":"","tablespace_name":"UNDOTBS1","total_physical_all_mb":"65536","current_use_mb":"26","percent_used":"0"}, "cdb_tbs_check":  {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN2467","tablespace_name":"SYSAUX","total_physical_all_mb":"65536","current_use_mb":"627","percent_used":"1"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1S48633","tablespace_name":"SYSTEM","total_physical_all_mb":"65536","current_use_mb":"784","percent_used":"1"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN8944","tablespace_name":"SYSAUX","total_physical_all_mb":"65536","current_use_mb":"1546","percent_used":"2"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1S48633","tablespace_name":"USERS","total_physical_all_mb":"65536","current_use_mb":"1149","percent_used":"2"}, "pdb_tbs_check":  {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN8944","tablespace_name":"SYSTEM","total_physical_all_mb":"65536","current_use_mb":"705","percent_used":"1"}, "pdb_tbs_check": {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1NN8944","tablespace_name":"INDX","total_physical_all_mb":"32767","current_use_mb":"378","percent_used":"1"}, "pdb_tbs_check":  {"check_name":"pdb_tbs_check","check_status":"OK","check_error":"","pdb_name":"O1S48633","tablespace_name":"USRINDEX","total_physical_all_mb":"65536","current_use_mb":"128","percent_used":"0"}, } }
Labels (3)
0 Karma

chandrasekhar46
Loves-to-Learn Everything

evevent after uploadevent after upload

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

This looks like a perfectly reasonable event to ingest whole - you should specify that it is JSON format for extraction purposes, and you can use the json_* functions to manipulate the data in your searches. Is it just that you need help to find the timestamp for the event or is Splunk already doing that correctly?

0 Karma

chandrasekhar46
Loves-to-Learn Everything

here is the raw file and i have tried this by uploading for test file but not getting events in proper format
when trying to ingest 
all data is getting on one event not as separate inside this separate objects are there 
do i need to modify the file structure or need to configure props at host level ?

{
  "date_extract_linux": "2024-07-26 08:44:23.398743330",
  "database": {
    "script_version": "1.0",
    "global_parameters": {
      "check_name": "General_parameters",
      "check_status": "OK",
      "check_error": "",
      "script_version": "1.0",
      "host_name": "flosclnrhv03.pharma.aventis.com",
      "database_name": "C2N48617",
      "instance_name": "C2N48617",
      "database_version": "19.0.0.0.0",
      "database_major_version": "19",
      "database_minor_version": "0"
    },
    "queue_mem_check": [
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_TASKREPORTWORKTASK_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_PIWORKTASK_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_LABELWORKTASK_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "LIVE2459_VAL",
        "queue_name": "AQ$_Q_PIPROCESS_TAB_E",
        "queue_sharable_mem": "4072"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "SYS",
        "queue_name": "ALERT_QUE",
        "queue_sharable_mem": "0"
      },
      {
        "check_name": "queue_mem_check",
        "check_status": "OK",
        "check_error": "",
        "queue_owner": "SYS",
        "queue_name": "AQ$_ALERT_QT_E",
        "queue_sharable_mem": "0"
      }
    ],
    "fra_check": {
      "check_name": "fra_check",
      "check_status": "OK",
      "check_error": "",
      "flash_in_gb": "40",
      "flash_used_in_gb": ".62",
      "flash_reclaimable_gb": "0",
      "percent_of_space_used": "1.56"
    },
    "processes": {
      "check_name": "processes",
      "check_status": "OK",
      "check_error": "",
      "process_percent": "27.3",
      "process_current_value": "273",
      "process_limit": "1000"
    },
    "sessions": {
      "check_name": "sessions",
      "check_status": "OK",
      "check_error": "",
      "sessions_percent": "16.41",
      "sessions_current_value": "252",
      "sessions_limit": "1536"
    },
    "cdb_tbs_check": [
      {
        "check_name": "cdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "tablespace_name": "UNDOTBS1",
        "total_physical_all_mb": "65536",
        "current_use_mb": "26",
        "percent_used": "0"
      },
      {
        "check_name": "cdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "tablespace_name": "USERS",
        "total_physical_all_mb": "65536",
        "current_use_mb": "4",
        "percent_used": "0"
      }
    ],
    "pdb_tbs_check": [
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN8944",
        "tablespace_name": "USERS",
        "total_physical_all_mb": "32767",
        "current_use_mb": "1176",
        "percent_used": "4"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "UNDOTBS1",
        "total_physical_all_mb": "65536",
        "current_use_mb": "76",
        "percent_used": "0"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "TOOLS",
        "total_physical_all_mb": "65536",
        "current_use_mb": "5",
        "percent_used": "0"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN2467",
        "tablespace_name": "UNDOTBS1",
        "total_physical_all_mb": "65536",
        "current_use_mb": "22",
        "percent_used": "0"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN2467",
        "tablespace_name": "SYSAUX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "627",
        "percent_used": "1"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "SYSTEM",
        "total_physical_all_mb": "65536",
        "current_use_mb": "784",
        "percent_used": "1"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1NN8944",
        "tablespace_name": "SYSAUX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "1546",
        "percent_used": "2"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "SYSAUX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "7802",
        "percent_used": "12"
      },
      {
        "check_name": "pdb_tbs_check",
        "check_status": "OK",
        "check_error": "",
        "pdb_name": "O1S48633",
        "tablespace_name": "USRINDEX",
        "total_physical_all_mb": "65536",
        "current_use_mb": "128",
        "percent_used": "0"
      }
    ]
  }
}
0 Karma

PickleRick
SplunkTrust
SplunkTrust

If you want to have your array from the "queue_mem_check" field ingested as separate events I'm afraid you'll have to preprocess it with an external tool before getting this data to Splunk.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Apart from the fact that this is not quite valid JSON, what have you tried? what are you getting? what are you expecting?

0 Karma

chandrasekhar46
Loves-to-Learn Everything

i am testing this data by uploading in splunk cloud but i am not getting events in proper format
when i am selectin sourcetype as json in settings given screen shot

Screenshot_30-7-2024_125842_sanofi01.splunkcloud.com.jpeg


[
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "General_parameters",
"check_status": "OK",
"database_major_version": "19",
"database_minor_version": "0",
"database_name": "C2N48617",
"database_version": "19.0.0.0.0",
"extract_date": "30/07/2024 08:09:06",

"host_name": "flosclnrhv03.pharma.aventis.com",
"instance_name": "C2N48617",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_TASKREPORTWORKTASK_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_TASKREPORTWORKTASK_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_PIWORKTASK_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_PIWORKTASK_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_LABELWORKTASK_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_LABELWORKTASK_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "LIVE2459_VAL",
"check_key_4": "AQ$_Q_PIPROCESS_TAB_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_Q_PIPROCESS_TAB_E",
"queue_owner": "LIVE2459_VAL",
"queue_sharable_mem": "4072",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "SYS",
"check_key_4": "ALERT_QUE",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "ALERT_QUE",
"queue_owner": "SYS",
"queue_sharable_mem": "0",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "SYS",
"check_key_4": "AQ$_ALERT_QT_E",
"check_key_5": "",
"check_key_6": "",
"check_name": "queue_mem_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"queue_name": "AQ$_ALERT_QT_E",
"queue_owner": "SYS",
"queue_sharable_mem": "0",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "fra_check",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"flash_in_gb": "40",
"flash_reclaimable_gb": "0",
"flash_used_in_gb": ".47",
"percent_of_space_used": "1.17",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "processes",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"process_current_value": "299",
"process_limit": "1000",
"process_percent": "29.9",
"script_version": "1.0"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "sessions",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"script_version": "1.0",
"sessions_current_value": "299",
"sessions_limit": "1536",
"sessions_percent": "19.47"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "SYSTEM",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1355",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "2",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "SYSAUX",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "23635",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "36",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "UNDOTBS1",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "22",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "USERS",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "cdb_tbs_check",
"check_status": "OK",
"current_use_mb": "4",
"extract_date": "30/07/2024 08:09:06",

"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "USERS",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "USERS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1176",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "4",
"script_version": "1.0",
"tablespace_name": "USERS",
"total_physical_all_mb": "32767"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "SYSTEM",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "784",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "SYSAUX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1549",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "2",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "USERS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "1149",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "2",
"script_version": "1.0",
"tablespace_name": "USERS",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "UNDOTBS1",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "60",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "SYSAUX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "7803",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "12",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "SYSTEM",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "705",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN8944",
"check_key_3": "INDX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "378",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN8944",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "INDX",
"total_physical_all_mb": "32767"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN2467",
"check_key_3": "SYSTEM",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "623",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN2467",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSTEM",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "AUDIT_TBS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "3",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "AUDIT_TBS",
"total_physical_all_mb": "8192"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "USRINDEX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "128",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "USRINDEX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "UNDOTBS1",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "77",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1S48633",
"check_key_3": "TOOLS",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "5",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1S48633",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "TOOLS",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN2467",
"check_key_3": "UNDOTBS1",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "24",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN2467",
"percent_used": "0",
"script_version": "1.0",
"tablespace_name": "UNDOTBS1",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "O1NN2467",
"check_key_3": "SYSAUX",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "pdb_tbs_check",
"check_status": "OK",
"current_use_mb": "628",
"extract_date": "30/07/2024 08:09:06",

"pdb_name": "O1NN2467",
"percent_used": "1",
"script_version": "1.0",
"tablespace_name": "SYSAUX",
"total_physical_all_mb": "65536"
},
{
"check_error": "",
"check_key_1": "C2N48617",
"check_key_2": "",
"check_key_3": "",
"check_key_4": "",
"check_key_5": "",
"check_key_6": "",
"check_name": "monitoring_package",
"check_status": "OK",
"extract_date": "30/07/2024 08:09:06",

"script_version": "1.0"
}
]
0 Karma
Get Updates on the Splunk Community!

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...

Explore the Latest Educational Offerings from Splunk [January 2025 Updates]

At Splunk Education, we are committed to providing a robust learning experience for all users, regardless of ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...