I'm trying to output the reliability for a channel over a time period. My sample log file looks like this:
channels:2,4,5,7,9,11,20,26,44,201,202,203
1355558400,1355644800
338889600,338911200
1355609908,338902477,2
1355609912,338902478,2
1355611500,338902875,5
1355611568,338902892,5
1355612040,338903010,5
where channels:*, are the channels being monitored. 1355558400,1355644800 is the start and end time of time period being monitored. 1355611500,338902875,5 indicates that at 1355611500 there was an issue with channel 5. There is a possibility of 900 errors per hour (every 4 seconds the check happens)
I've been able to create the query to get reliability if there is an error, but the limitation is that it only counts from the first error to the last error but won't include the 100% reliability before and after as indicated by the time range on the first line. Eg between 1pm-5pm there are errors between 2-2:30pm and 4-4:30pm this query will only show the graph between 2-4:30pm but i want to include 1-5 since i know those ends are perfectly fine and thought i could do that if i could somehow "insert" a default value for timeperiod mentioned at start of file
Here's my current query:
source = *Data* _raw="*,*,5"
| dedup _raw
| timechart span=30m count
| eval reliability = (1 - count/450) * 100
| fields - count
| eval relHigh = reliability*100
| rangemap field=rel High red=0-9900 yellow=9901-9990 green=9991-10000
| xyseries _time range reliability
| makecontinuous _time
Any ideas?
... View more