Splunk Search

Splunk for analyzing Logs - looking for Big time gaps graph.

Arkowski
New Member

Hi!

I have a log that looks more or less like this:

 

'H 16-Sep-2021 10:57:03.084;   0:< 
 Jrn.Directive "WindowSize"  _
         , "[TMM_TEMP_HKLS_R20_V08x.rte]", "Sheet: 00 - Starting View" _
         , 1176, 922
																																					  
																   
'H 16-Sep-2021 10:57:03.251;   0:< 
Jrn.Directive "ScreenResolution"  _
        , 324, 1200
'H 16-Sep-2021 10:57:03.251;   0:< 
Jrn.Directive "ProjToPage"  _
        , "[TMM_TEMP_HKLS_R20_V08x.rte]", "Sheet: 00 - Starting View" _
        , 890.19441375881252 _
        , 890.19441375881252, 0.00000000000000, 0.00000000000000 _
        , 0.00000000000000, 890.19441375881252, 0.00000000000000 _
        , 0.00000000000000, 0.00000000000000, 890.19441375881252 _
        , 0.00000000000000, 0.00000000000000, 0.00000000000000
'H 16-Sep-2021 10:57:03.252;   0:< 

 

 

I am looking for something that would help me to analyze it and find big time gaps between events. Something like a graph that would indicate how big gaps occurred over time.

I just need something that would let me not look for those event by event or with notepad (logs tend to be big). I am completely new with Splunk, someone just let me know this is easily done with it. Thanks for any help.

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...