Getting Data In

Trying to integrate perf4j with our project and aggregate the results in Splunk

gaoagong
Engager

I'm trying to figure out how to integrate perf4j into our project in such a way that I can easily read the statistics and aggregate/graph/make charts in Splunk.

Anyone have any experience with this?

Tags (2)
0 Karma

marciogh
Engager

Use Perf4J CSV log4j appender, and extract the contents with this:

... | rex field=_raw "\"(?<perf4jtag>.*)\",.*,.*,(?<avg>.*),(?<min>.*),(?<max>.*),(?<dev>.*),(?<count>.*)" | timechart avg(dev) by perf4jtag
0 Karma

gaoagong
Engager

I have created the following query, but it doesn't seem to be sorting correctly.

host=somehost* source=*logfile.log | multikv | search *.success | stats avg(Avg_ms_) as avg, min(Min) as min, max(Max) as max, sum(Count) as count by Tag | sort - avg

Here is some sample data.

Performance Statistics 2013-04-23 12:20:00 - 2013-04-23 12:30:00
Tag Avg(ms) Min Max Std Dev Count
someAPI.success 155.0 155 155 0.0 1
someOtherAPI.success 243.0 243 243 0.0 1
yetAnother.success 283.0 283 283 0.0 1
heyLookAnother.success 261.5 192 331 69.5 2
pletheraOfAPI.success 1.0 1 1 0.0 1
tisTrue.success 1769.0 1769 1769 0.0 1

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...