We have the following code that ran for one and a half hours last week and consumed lots of cpu. How can we optimize this query? index=<index name> Error*
| eval ERROR_TYPE = if(searchmatch("...
See more...
We have the following code that ran for one and a half hours last week and consumed lots of cpu. How can we optimize this query? index=<index name> Error*
| eval ERROR_TYPE = if(searchmatch("SQLException"), "SQL Exceptions",
(if(searchmatch("JwtTokenUtil"), "JWTToken Error",
(if(searchmatch("JwtAuthenticationTokenFilter"), "Authentication error",
(if(searchmatch("java.lang.OutOfMemoryError: Java heap space"), "Out of memory error",
(if(searchmatch("sendEmail"), "Send Mail error",
(if(searchmatch("message was not delivered"), "IMAP error",
(if(searchmatch("sever not reponding"), "Server error",
(if(searchmatch("Timed Out"),"Timed Out Error", "OTHER")))))))))))))))
| timechart count by ERROR_TYPE