Splunk Search

Splunk for analyzing Logs - looking for Big time gaps graph.

Arkowski
New Member

Hi!

I have a log that looks more or less like this:

 

'H 16-Sep-2021 10:57:03.084;   0:< 
 Jrn.Directive "WindowSize"  _
         , "[TMM_TEMP_HKLS_R20_V08x.rte]", "Sheet: 00 - Starting View" _
         , 1176, 922
																																					  
																   
'H 16-Sep-2021 10:57:03.251;   0:< 
Jrn.Directive "ScreenResolution"  _
        , 324, 1200
'H 16-Sep-2021 10:57:03.251;   0:< 
Jrn.Directive "ProjToPage"  _
        , "[TMM_TEMP_HKLS_R20_V08x.rte]", "Sheet: 00 - Starting View" _
        , 890.19441375881252 _
        , 890.19441375881252, 0.00000000000000, 0.00000000000000 _
        , 0.00000000000000, 890.19441375881252, 0.00000000000000 _
        , 0.00000000000000, 0.00000000000000, 890.19441375881252 _
        , 0.00000000000000, 0.00000000000000, 0.00000000000000
'H 16-Sep-2021 10:57:03.252;   0:< 

 

 

I am looking for something that would help me to analyze it and find big time gaps between events. Something like a graph that would indicate how big gaps occurred over time.

I just need something that would let me not look for those event by event or with notepad (logs tend to be big). I am completely new with Splunk, someone just let me know this is easily done with it. Thanks for any help.

Labels (1)
0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!