You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
129 lines
5.7 KiB
129 lines
5.7 KiB
{
|
|
"alert_lag": 30,
|
|
"alert_period": "5",
|
|
"base_search": "| mstats sum(\"rum.page_view.count\") as rum_page_view, sum(\"rum.client_error.count\") as rum_client_error, avg(\"rum.page_view.time.ns.p75\") as rum_page_view_time, sum(\"rum.resource_request.count\") as rum_resource_request, avg(\"rum.resource_request.time.ns.p75\") as rum_resource_request_time, sum(\"rum.crash.count\") as rum_crash_count, sum(\"rum.app_error.count\") as rum_app_error_count, avg(\"rum.cold_start.time.ns.p75\") as rum_cold_start_time, sum(\"rum.cold_start.count\") as rum_cold_start_count, avg(\"rum.webvitals_lcp.time.ns.p75\") as rum_webvitals_lcp, avg(\"rum.webvitals_cls.score.p75\") as rum_webvitals_cls, avg(\"rum.webvitals_fid.time.ns.p75\") as rum_webvitals_fid, where `itsi-cp-observability-indexes` AND app=* AND (sf_ua_osname=Linux OR sf_ua_osname=Windows OR sf_ua_osname=\"Mac OS X\") AND sf_ua_browsername=* by app, sf_ua_browsername, sf_ua_osname \n| eval browsers=sf_ua_browsername +\":\"+ app +\":\"+ sf_ua_osname \n| fields browsers, app, sf_ua_osname, sf_ua_browsername, rum_page_view, rum_client_error, rum_page_view_time, rum_resource_request, rum_resource_request_time, rum_crash_count, rum_app_error_count, rum_cold_start_time, rum_cold_start_count, rum_webvitals_lcp, rum_webvitals_cls, rum_webvitals_fid",
|
|
"description": "This Base Search describes Real User Monitoring Browser Metrics.",
|
|
"entity_filter_field": "browsers",
|
|
"entity_split_field": "browsers",
|
|
"is_filter_entities_to_service": true,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-splunk-observability-rum-browser-base",
|
|
"metric_qualifier": "",
|
|
"metrics": [
|
|
{
|
|
"aggregate_statop": "sum",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "custom_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-client-error",
|
|
"threshold_field": "rum_client_error",
|
|
"title": "rum_client_error",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "sum",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "custom_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-page-view",
|
|
"threshold_field": "rum_page_view",
|
|
"title": "rum_page_view",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-page-view-time",
|
|
"threshold_field": "rum_page_view_time",
|
|
"title": "rum_page_view_time",
|
|
"unit": "ms"
|
|
},
|
|
{
|
|
"aggregate_statop": "sum",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "custom_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-resource-request",
|
|
"threshold_field": "rum_resource_request",
|
|
"title": "rum_resource_request",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-resource-request-time",
|
|
"threshold_field": "rum_resource_request_time",
|
|
"title": "rum_resource_request_time",
|
|
"unit": "ms"
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-webvitals-cls",
|
|
"threshold_field": "rum_webvitals_cls",
|
|
"title": "rum_webvitals_cls",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-webvitals-fid",
|
|
"threshold_field": "rum_webvitals_fid",
|
|
"title": "rum_webvitals_fid",
|
|
"unit": "ms"
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-webvitals-lcp",
|
|
"threshold_field": "rum_webvitals_lcp",
|
|
"title": "rum_webvitals_lcp",
|
|
"unit": "ms"
|
|
}
|
|
],
|
|
"search_alert_earliest": "15",
|
|
"title": "RUM_Browser_Base",
|
|
"version": "0.0.38"
|
|
} |