From a29f28a15f4d361d710f13279b70107a2bf452e9 Mon Sep 17 00:00:00 2001 From: "Qian (Jim) Fu" Date: Wed, 12 Feb 2025 10:09:21 -0800 Subject: [PATCH] address feedbacks - show 5xx total and 4xx total upfront... --- splunk/api_big_stats_dashboard.xml | 40 +++++++++++++++++++----------- 1 file changed, 26 insertions(+), 14 deletions(-) diff --git a/splunk/api_big_stats_dashboard.xml b/splunk/api_big_stats_dashboard.xml index ef7ec4115..cdb291344 100755 --- a/splunk/api_big_stats_dashboard.xml +++ b/splunk/api_big_stats_dashboard.xml @@ -318,20 +318,6 @@ - - - Distribution of response codes - - index=bluebutton source="/var/log/pyapps/perf_mon.log*" host=$bbEnv$ env=$bbEnvLabel$ $appNameExpr$ message.path!="/health*" | search "message.ip_addr"="$bbIpAddr$" AND ("message.path"=".well-known/*" OR "message.path"="/$apiVersionsPattern$/*" OR "message.path"="*/admin/*") | spath output=code path="message.response_code" | table code | stats count by code - $t_local.earliest$ - $t_local.latest$ - 1 - - - - - - @@ -354,6 +340,19 @@ + + 5XX Responses Total + + + index=bluebutton source="/var/log/pyapps/perf_mon.log*" host=$bbEnv$ env=$bbEnvLabel$ $appNameExpr$ message.path!="/health*" | search "message.ip_addr"="$bbIpAddr$" AND (message.response_code > 499) AND (message.response_code < 600) AND ("message.path"=".well-known/*" OR "message.path"="/$apiVersionsPattern$/*" OR "message.path"="*/admin/*") | spath output=code path="message.response_code" | table code | stats count + $t_local.earliest$ + $t_local.latest$ + 1 + + + + + 5XX Responses Breakdown @@ -388,6 +387,19 @@ + + 4XX Responses Total + + + index=bluebutton source="/var/log/pyapps/perf_mon.log*" host=$bbEnv$ env=$bbEnvLabel$ $appNameExpr$ message.path!="/health*" | search "message.ip_addr"="$bbIpAddr$" AND (message.response_code > 399) AND (message.response_code < 500) AND ("message.path"=".well-known/*" OR "message.path"="/$apiVersionsPattern$/*" OR "message.path"="*/admin/*") | spath output=code path="message.response_code" | table code | stats count + $t_local.earliest$ + $t_local.latest$ + 1 + + + + + 4XX Responses Breakdown