Splunk Search

Why am I receiving negative values for jenkins build times?

cdgill
Explorer

Here is my search query, though this issue is common across a number of different custom searches we are attempting:
index=jenkins* job_name=mosaic-os*/master event_tag=job_event (type=started OR type=completed) (NOT job_result=SUCCESS) | dedup build_number | eval build_duration = job_duration - queue_time - 'test_summary.duration' | stats values(job_name), avg(build_duration), min(build_duration), max(build_duration), stdev(build_duration), stdev(queue_time), stdev(test_summary.duration)

For almost any parameter we get a negative value for the min build_duration. Obviously build times can't go back in time, so does anyone have any possible insights on what may be causing this?

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Why are you subtracting the times? If you spend longer in queue, you get a negative number automatically. Shouldn't the math be such:

eval build_duration = job_duration + queue_time + 'test_summary.duration'

This makes more sense to me. As it gives a total time for the start to finish time of the build.

0 Karma

cdgill
Explorer

I was told that job_duration already includes queue_time and 'test_summary.duration', thus I was subtracting those values to get just the build_duration without queue and test_sum. Is that not the case?

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

well, you can start with a table job_duration queue_time 'test_summary.duration' and check it your self. maybe they are in different units? Seconds vs minutes ?

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...