You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
166 lines
7.9 KiB
166 lines
7.9 KiB
<form stylesheet="custom.css" version="1.1">
|
|
<label>Application Crashes - Windows</label>
|
|
<fieldset submitButton="false" autoRun="true">
|
|
<input type="dropdown" token="EventHost" searchWhenChanged="true">
|
|
<label>Event Host</label>
|
|
<choice value="*">All</choice>
|
|
<search>
|
|
<query>| inputlookup windows_event_system | dedup Host | sort Host</query>
|
|
</search>
|
|
<fieldForLabel>Host</fieldForLabel>
|
|
<fieldForValue>Host</fieldForValue>
|
|
<default>*</default>
|
|
</input>
|
|
<input type="time" token="Time">
|
|
<label></label>
|
|
<default>
|
|
<earliest>-15m</earliest>
|
|
<latest>now</latest>
|
|
</default>
|
|
</input>
|
|
</fieldset>
|
|
<row>
|
|
<panel>
|
|
<table>
|
|
<title>Total Crashes By Host</title>
|
|
<search>
|
|
<query>eventtype="wineventlog_common" EventCode="1001" Event_Name="*" host="$EventHost$" | eval application=P1 | stats sparkline as Trend, count by host | sort -count</query>
|
|
<earliest>$Time.earliest$</earliest>
|
|
<latest>$Time.latest$</latest>
|
|
</search>
|
|
<option name="wrap">true</option>
|
|
<option name="rowNumbers">false</option>
|
|
<option name="drilldown">cell</option>
|
|
<option name="dataOverlayMode">none</option>
|
|
<option name="count">10</option>
|
|
</table>
|
|
</panel>
|
|
<panel>
|
|
<table>
|
|
<title>Total Crashes By Application</title>
|
|
<search>
|
|
<query>eventtype="wineventlog_common" EventCode="1001" Event_Name="*" host="$EventHost$" | eval application=P1." (version: ".P2.")" | stats sparkline as Trend, count by application | sort -count</query>
|
|
<earliest>$Time.earliest$</earliest>
|
|
<latest>$Time.latest$</latest>
|
|
</search>
|
|
<option name="wrap">true</option>
|
|
<option name="rowNumbers">false</option>
|
|
<option name="drilldown">cell</option>
|
|
<option name="dataOverlayMode">none</option>
|
|
<option name="count">10</option>
|
|
</table>
|
|
</panel>
|
|
</row>
|
|
<row>
|
|
<panel>
|
|
<chart>
|
|
<title>Crashes Over Time By Host</title>
|
|
<search>
|
|
<query>eventtype="wineventlog_common" EventCode="1001" Event_Name="*" host="$EventHost$" | timechart count by host useother=f</query>
|
|
<earliest>$Time.earliest$</earliest>
|
|
<latest>$Time.latest$</latest>
|
|
</search>
|
|
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
|
|
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
|
|
<option name="charting.axisTitleX.visibility">visible</option>
|
|
<option name="charting.axisTitleY.visibility">visible</option>
|
|
<option name="charting.axisTitleY2.visibility">visible</option>
|
|
<option name="charting.axisX.scale">linear</option>
|
|
<option name="charting.axisY.scale">linear</option>
|
|
<option name="charting.axisY2.enabled">0</option>
|
|
<option name="charting.axisY2.scale">inherit</option>
|
|
<option name="charting.chart">line</option>
|
|
<option name="charting.chart.bubbleMaximumSize">50</option>
|
|
<option name="charting.chart.bubbleMinimumSize">10</option>
|
|
<option name="charting.chart.bubbleSizeBy">area</option>
|
|
<option name="charting.chart.nullValueMode">gaps</option>
|
|
<option name="charting.chart.showDataLabels">none</option>
|
|
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
|
|
<option name="charting.chart.stackMode">default</option>
|
|
<option name="charting.chart.style">shiny</option>
|
|
<option name="charting.drilldown">none</option>
|
|
<option name="charting.layout.splitSeries">0</option>
|
|
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
|
|
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
|
|
<option name="charting.legend.placement">right</option>
|
|
</chart>
|
|
</panel>
|
|
<panel>
|
|
<chart>
|
|
<title>Crashes Over Time By Application</title>
|
|
<search>
|
|
<query>eventtype="wineventlog_common" EventCode="1001" Event_Name="*" host="$EventHost$" | eval application=P1." (version: ".P2.")" | timechart count by application useother=f</query>
|
|
<earliest>$Time.earliest$</earliest>
|
|
<latest>$Time.latest$</latest>
|
|
</search>
|
|
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
|
|
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
|
|
<option name="charting.axisTitleX.visibility">visible</option>
|
|
<option name="charting.axisTitleY.visibility">visible</option>
|
|
<option name="charting.axisTitleY2.visibility">visible</option>
|
|
<option name="charting.axisX.scale">linear</option>
|
|
<option name="charting.axisY.scale">linear</option>
|
|
<option name="charting.axisY2.enabled">0</option>
|
|
<option name="charting.axisY2.scale">inherit</option>
|
|
<option name="charting.chart">line</option>
|
|
<option name="charting.chart.bubbleMaximumSize">50</option>
|
|
<option name="charting.chart.bubbleMinimumSize">10</option>
|
|
<option name="charting.chart.bubbleSizeBy">area</option>
|
|
<option name="charting.chart.nullValueMode">gaps</option>
|
|
<option name="charting.chart.showDataLabels">none</option>
|
|
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
|
|
<option name="charting.chart.stackMode">default</option>
|
|
<option name="charting.chart.style">shiny</option>
|
|
<option name="charting.drilldown">all</option>
|
|
<option name="charting.layout.splitSeries">0</option>
|
|
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
|
|
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
|
|
<option name="charting.legend.placement">right</option>
|
|
</chart>
|
|
</panel>
|
|
</row>
|
|
<row>
|
|
<panel>
|
|
<table>
|
|
<title>Crashes Details By Host</title>
|
|
<search>
|
|
<query>eventtype="wineventlog_common" EventCode="1001" Event_Name="*" host="$EventHost$" | eval application=P1." (version: ".P2.")" | stats latest(_time) as ltime, count by host, application | convert ctime(ltime) | eval comb=application." (Total App Events = ".count." )(Last Crash Time = ".ltime." )" | stats values(comb) AS Applications, sum(count) AS Total_Events by host | sort -Total_Events</query>
|
|
<earliest>$Time.earliest$</earliest>
|
|
<latest>$Time.latest$</latest>
|
|
</search>
|
|
<option name="wrap">true</option>
|
|
<option name="rowNumbers">false</option>
|
|
<option name="drilldown">cell</option>
|
|
<option name="dataOverlayMode">none</option>
|
|
<option name="count">10</option>
|
|
</table>
|
|
</panel>
|
|
</row>
|
|
<row>
|
|
<panel>
|
|
<html>
|
|
<h3>More reports</h3>
|
|
<ul class="windows-footer">
|
|
<li>
|
|
<a href="search?s=Application%20crash%20count%20in%20the%20last%2024%20hours">Application crash count in the last 24 hours</a>
|
|
</li>
|
|
<li>
|
|
<a href="search?s=Application%20crash%20count%20in%20the%20last%207%20days">Application crash count in the last 7 days</a>
|
|
</li>
|
|
<li>
|
|
<a href="search?s=Application%20crash%20count%20in%20the%20last%2030%20days">Application crash count in the last 30 days</a>
|
|
</li>
|
|
<li>
|
|
<a href="search?s=List%20of%20shutdowns%20for%20last%2030%20days">List of shutdowns for last 30 days</a>
|
|
</li>
|
|
<li>
|
|
<a href="search?s=List%20of%20unexpected%20service%20terminations%20for%20the%20last%2030%20days">List of unexpected service terminations for the last 30 days</a>
|
|
</li>
|
|
<li>
|
|
<a href="search?s=List%20of%20failed%20service%20starts%20for%20the%20last%2030%20days">List of failed service starts for the last 30 days</a>
|
|
</li>
|
|
</ul>
|
|
</html>
|
|
</panel>
|
|
</row>
|
|
</form> |