How can i sort and show top 20 applications in this dashboard? i tired this but id didnt work source = /clocal/www/logs/WAS/WebSphere7/*.log error | stats count AS ERR_CNT by source | sort limit=20 ERR_CNT ... View more

Hi Today i prepared a simple dash board with application log files names and the count corresponding to the log file. That dashbaord looks some thing like this Source Count /clocal/www/logs/WAS/WebSphere7/dcsession.log 23123 /clocal/www/logs/WAS/WebSphere7/sales.common.log 345345 /clocal/www/logs/WAS/WebSphere7/voim.log 4534 /clocal/www/logs/WAS/WebSphere7/dipap.log 343 /clocal/www/logs/WAS/WebSphere7/dcws.log 3453 If i need to show just the application name instead of entire path with log file name in dashboard how can i do that? ... View more

Hi Thanks for your quick reply. Yes in my company there are around 100 applications installed on a single Physical server. THe only way to identify the application name is based on the app log file name. As all errors specific to app will be written into a specific log file. BUt all the logs are under one folder structure on the server. So how can i prepare a dashboard with the app name and error count and sort the list based on the highest errors. Here is the example entry for event in splunk [Jul 27, 2016 02:55:38] ERROR [] [VehicleDAO] TimeoutException from callVINtelligenceWS method call : null date_mday = 27 date_month = july host = ods010adlrp04 source = /clocal/www/logs/WAS/WebSphere7/cscsales.log ... View more

Hi Thanks for your quick reply. Yes in my company there are around 100 applications installed on a single Physical server. THe only way to identify the application name is based on the app log file name. As all errors specific to app will be written into a specific log file. BUt all the logs are under one folder structure on the server. So how can i prepare a dashboard with the app name and error count and sort the list based on the highest errors. Here is the example entry for event in splunk [Jul 27, 2016 02:55:38] ERROR [] [VehicleDAO] TimeoutException from callVINtelligenceWS method call : null date_mday = 27 date_month = july host = ods010adlrp04 source = /clocal/www/logs/WAS/WebSphere7/cscsales.log ... View more

Hi I want to prepare a dashboard in splunk to show the applications and the error count and sort it based on the highest error count, may i know how can i do that? ... View more