Splunk Search

How to pull a report of application log where DEBUG level log is enabled

iqbalintouch
Path Finder

Hi,

is there anyway to pull a report to get the data of log where DEBUG level log is enabled, based on the index and sourcetype?

I am using below query to get the data:
index=myapp sourcetype=ejb_app_logs DEBUG | eval GB=b/1024/1024/1024 | timechart span=1d sum(GB) by s useother=false

0 Karma
Get Updates on the Splunk Community!

ATTENTION!! We’re MOVING (not really)

Hey, all! In an effort to keep this Slack workspace secure and also to make our new members' experience easy, ...

Splunk Admins: Build a Smarter Stack with These Must-See .conf25 Sessions

  Whether you're running a complex Splunk deployment or just getting your bearings as a new admin, .conf25 ...

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...