Splunk Search

How can i get cpu time for each component in log files?

vasavigangana
Explorer

Hai

    i have some installation logfiles and i want to caluculate cpu time for each components(success and falied cases)...
Tags (1)
0 Karma

chimell
Motivator

Hi
Try this search code

     index="_internal" source="*metrics.log" group="pipeline" 
        | chart sum(cpu_seconds) over processor | sort -sum(cpu_seconds)
        |rename sum(cpu_seconds) as "Total CPU Seconds"
0 Karma

fdi01
Motivator

try like this:
index=_internal status=failure OR status=success |stats values(status) as status by _time

to have time of differents status .

0 Karma

NOUMSSI
Builder

Hi,
Here is the search code:

index=_internal status=failure OR status=success | timechart c by status
0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...