Hi, I have log files that show total runtime in them as hours, minutes and seconds. I need some help to be able to get something useful from them.
I have the following query right now:
(sourcecategory=prod_lavastorm and "Elapsed Time is: ")
| parse regex field=_sourceName "\/(?<graph>[^\/]+)_PRODUCTION\d+" nodrop
| parse regex "Elapsed Time is: (?<run_time_string>.*\n)" multi
| parse regex field=run_time_string "Minutes - (?<seconds>\d+) Seconds" nodrop
| parse regex field=run_time_string "Hours - (?<minutes>\d+) Minutes" nodrop
| parse regex field=run_time_string "(?<hours>\d+) Hours" nodrop
| hours*3600 + minutes*60 + seconds as runtime
Could anyone help to get it per graph (note this is a term for process)
Essentially i'm looking to trend over time if a process is taking longer and once I have this i'm going to look at outliers too
Please sign in to leave a comment.