Splunk Search

How to pull a report of application log where DEBUG level log is enabled

iqbalintouch
Path Finder

Hi,

is there anyway to pull a report to get the data of log where DEBUG level log is enabled, based on the index and sourcetype?

I am using below query to get the data:
index=myapp sourcetype=ejb_app_logs DEBUG | eval GB=b/1024/1024/1024 | timechart span=1d sum(GB) by s useother=false

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!