You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
143 lines
6.3 KiB
143 lines
6.3 KiB
{
|
|
"alert_lag": 30,
|
|
"alert_period": "5",
|
|
"base_search": "| mstats sum(\"rum.page_view.count\") as rum_page_view, sum(\"rum.client_error.count\") as rum_client_error, avg(\"rum.page_view.time.ns.p75\") as rum_page_view_time, sum(\"rum.resource_request.count\") as rum_resource_request, avg(\"rum.resource_request.time.ns.p75\") as rum_resource_request_time, sum(\"rum.crash.count\") as rum_crash_count, sum(\"rum.app_error.count\") as rum_app_error_count, avg(\"rum.cold_start.time.ns.p75\") as rum_cold_start_time, sum(\"rum.cold_start.count\") as rum_cold_start_count, avg(\"rum.webvitals_lcp.time.ns.p75\") as rum_webvitals_lcp, avg(\"rum.webvitals_cls.score.p75\") as rum_webvitals_cls, avg(\"rum.webvitals_fid.time.ns.p75\") as rum_webvitals_fid, where `itsi-cp-observability-indexes` AND app=* AND (os.name=Android OR os.name=iOS) AND app.version=* by app, app.version, os.name, sf_environment, sf_organizationID\n| eval app_version='app.version', os_name='os.name'\n| eval app_identifier= app +\":\"+ app_version +\":\"+ os_name +\":\"+ sf_environment +\":\"+ sf_organizationID\n| fields _time, app_identifier, rum_page_view, rum_client_error, rum_page_view_time, rum_resource_request, rum_resource_request_time, rum_crash_count, rum_app_error_count, rum_cold_start_time, rum_cold_start_count, rum_webvitals_lcp, rum_webvitals_cls, rum_webvitals_fid",
|
|
"description": "This Base Search describes Real User Monitoring Mobile / App metrics.",
|
|
"entity_filter_field": "app_identifier",
|
|
"entity_split_field": "app_identifier",
|
|
"is_filter_entities_to_service": true,
|
|
"is_split_by_entity": true,
|
|
"key": "da-itsi-cp-splunk-observability-rum-app-base",
|
|
"metric_qualifier": "",
|
|
"metrics": [
|
|
{
|
|
"aggregate_statop": "sum",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "custom_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-app-error-count",
|
|
"threshold_field": "rum_app_error_count",
|
|
"title": "rum_app_error_count",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "sum",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "custom_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-client-error",
|
|
"threshold_field": "rum_client_error",
|
|
"title": "rum_client_error",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "sum",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "custom_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-cold-start-count",
|
|
"threshold_field": "rum_cold_start_count",
|
|
"title": "rum_cold_start_count",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-cold-start-time",
|
|
"threshold_field": "rum_cold_start_time",
|
|
"title": "rum_cold_start_time",
|
|
"unit": "ms"
|
|
},
|
|
{
|
|
"aggregate_statop": "sum",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "custom_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-crash-count",
|
|
"threshold_field": "rum_crash_count",
|
|
"title": "rum_crash_count",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "sum",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "custom_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-page-view",
|
|
"threshold_field": "rum_page_view",
|
|
"title": "rum_page_view",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-page-view-time",
|
|
"threshold_field": "rum_page_view_time",
|
|
"title": "rum_page_view_time",
|
|
"unit": "ms"
|
|
},
|
|
{
|
|
"aggregate_statop": "sum",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "custom_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-resource-request",
|
|
"threshold_field": "rum_resource_request",
|
|
"title": "rum_resource_request",
|
|
"unit": ""
|
|
},
|
|
{
|
|
"aggregate_statop": "avg",
|
|
"entity_statop": "avg",
|
|
"fill_gaps": "null_value",
|
|
"gap_custom_alert_value": "0",
|
|
"gap_severity": "unknown",
|
|
"gap_severity_color": "#CCCCCC",
|
|
"gap_severity_color_light": "#EEEEEE",
|
|
"gap_severity_value": "-1",
|
|
"key": "rum-resource-request-time",
|
|
"threshold_field": "rum_resource_request_time",
|
|
"title": "rum_resource_request_time",
|
|
"unit": "ms"
|
|
}
|
|
],
|
|
"search_alert_earliest": "15",
|
|
"title": "RUM_App_Base",
|
|
"version": "0.0.38"
|
|
} |