How to List all Long running calls?

[moovon]

Each call in my own application contains a unique identifier.
Want to list down all the current calls which are running for more than 100 seconds in the system.

[moovon]

My own application

You can assume like this , there are lots of logs being printed in splunk..

void APImethod() {
   log ("method start")
   // lots of processing
   log ("method end")
}

`my_unqiueId = some_random_number status=200 message=Successfully created resource` 


, so want to list down all the current calls where processing is taking more than 100secs.. real time ones

[gcusello]

Hi @moovon,

I suppose that you already extracted fields because they seem to be in jsn formatand that "log" is the timestamp of the "Method start" and "methid" end, otherwise you should share some sample log to analyze them.

so you have only to run a simple search like the following:

index=your_index status=200 message="Successfully created resource"
| rename "method end" AS method_end "method start" AS method_start
| stats 
   latest(method_end) AS method_end 
   earliest(method_start AS method_start 
   BY my_unqiueId
| eval  method_end-method_start

Ciao.

Giuseppe 

[gcusello]

Hi @moovon,

are you speaking of a Splunk App or about your own application?

if your own application, pleae share some sample of your logs.

Ciao.

Giuseppe