Splunk Search

Splunk for analyzing Logs - looking for Big time gaps graph.

Arkowski
New Member

Hi!

I have a log that looks more or less like this:

 

'H 16-Sep-2021 10:57:03.084;   0:< 
 Jrn.Directive "WindowSize"  _
         , "[TMM_TEMP_HKLS_R20_V08x.rte]", "Sheet: 00 - Starting View" _
         , 1176, 922
																																					  
																   
'H 16-Sep-2021 10:57:03.251;   0:< 
Jrn.Directive "ScreenResolution"  _
        , 324, 1200
'H 16-Sep-2021 10:57:03.251;   0:< 
Jrn.Directive "ProjToPage"  _
        , "[TMM_TEMP_HKLS_R20_V08x.rte]", "Sheet: 00 - Starting View" _
        , 890.19441375881252 _
        , 890.19441375881252, 0.00000000000000, 0.00000000000000 _
        , 0.00000000000000, 890.19441375881252, 0.00000000000000 _
        , 0.00000000000000, 0.00000000000000, 890.19441375881252 _
        , 0.00000000000000, 0.00000000000000, 0.00000000000000
'H 16-Sep-2021 10:57:03.252;   0:< 

 

 

I am looking for something that would help me to analyze it and find big time gaps between events. Something like a graph that would indicate how big gaps occurred over time.

I just need something that would let me not look for those event by event or with notepad (logs tend to be big). I am completely new with Splunk, someone just let me know this is easily done with it. Thanks for any help.

Labels (1)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...