You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Splunk_Deploiement/dashboards/trackme_trackMe_audit_ops.xml

380 lines
8.6 KiB

<dashboard version="2" theme="dark">
<label>TrackMe - Tenants Operational Status Overview</label>
<description></description>
<definition><![CDATA[
{
"dataSources": {
"ds_search_ops_status": {
"type": "ds.search",
"options": {
"query": "| `per_tenant_ops_status_raw(*)`\n| lookup trackme_virtual_tenants tenant_id OUTPUT tenant_desc",
"queryParameters": {
"earliest": "-5m",
"latest": "now"
}
},
"name": "ops_status"
},
"ds_search_ops_status_overtime": {
"type": "ds.search",
"options": {
"query": "(`trackme_audit_idx` OR [ | trackmeload | search tenant_idx_settings!=\"global\" | fields tenant_idx_settings | spath input=tenant_idx_settings | stats count by trackme_audit_idx | dedup trackme_audit_idx | rename trackme_audit_idx as index | fields index | format ] ) [ | inputlookup trackme_virtual_tenants | fields tenant_id | format | fields search ] sourcetype=\"trackme:health\""
},
"name": "ops_status_overtime"
},
"ds_search_1": {
"type": "ds.search",
"options": {
"query": "| `per_tenant_ops_status_raw(*)` | table tenant_id, status \n| stats count by status",
"queryParameters": {
"earliest": "-5m",
"latest": "now"
}
},
"name": "tenant_status"
},
"ds_n1FCNS0l": {
"type": "ds.search",
"options": {
"query": "| `per_tenant_ops_status_raw(*)` | table tenant_id, status\n| sort 0 tenant_id"
},
"name": "status_by_tenant"
},
"ds_8HIte7Mj": {
"type": "ds.search",
"options": {
"query": "`per_tenant_ops_summary_activity`"
},
"name": "degradation_over_time"
},
"ds_J2DBgjhE": {
"type": "ds.search",
"options": {
"query": "| `per_tenant_ops_status_raw(*)` | fields tenant_id, status, overall_ops_pct, tenant_last_exec job_component_register | trackmeprettyjson fields=\"job_component_register\""
},
"name": "detailed_job_results"
},
"ds_VbAZ0by4": {
"type": "ds.chain",
"options": {
"extend": "ds_search_ops_status",
"query": "| stats count by status"
},
"name": "tenants_count_by_status"
},
"ds_I7q4oaTU": {
"type": "ds.chain",
"options": {
"extend": "ds_search_ops_status",
"query": "| fields tenant_id, tenant_desc, status\n| sort 0 tenant_id"
},
"name": "tenants_overview"
},
"ds_NjWl6NcX": {
"type": "ds.chain",
"options": {
"extend": "ds_search_ops_status",
"query": "| fields tenant_id, status, overall_ops_pct, tenant_last_exec job_component_register \n| trackmeprettyjson fields=\"job_component_register\"\n| rex field=job_component_register mode=sed \"s/\\\"success/\\\"🟢 success/g\"\n| rex field=job_component_register mode=sed \"s/\\\"failure/\\\"❌ failure/g\""
},
"name": "table_tenants"
},
"ds_QI1wSZxd": {
"type": "ds.chain",
"options": {
"query": "| stats count as active_tenants \n| fields active_tenants",
"extend": "ds_search_ops_status"
},
"name": "single_active_tenants"
},
"ds_gq9ZqVBS": {
"type": "ds.chain",
"options": {
"extend": "ds_search_ops_status",
"query": "| stats count(eval(overall_ops_pct!=\"100\")) as degraded_tenants \n| fields degraded_tenants"
},
"name": "single_degraded_tenants"
}
},
"visualizations": {
"viz_chart_1": {
"type": "splunk.pie",
"dataSources": {
"primary": "ds_VbAZ0by4"
},
"title": "Tenants Operational Status",
"options": {
"collapseThreshold": 0.01,
"showDonutHole": true,
"labelDisplay": "valuesAndPercentage",
"seriesColorsByField": {
"OPERATIONAL": "#45d4ba",
"DEGRADED": "#e85b79"
}
}
},
"viz_jn3W19To": {
"type": "splunk.table",
"title": "Operational Status by tenant",
"dataSources": {
"primary": "ds_I7q4oaTU"
},
"options": {
"columnFormat": {
"status": {
"data": "> table | seriesByName(\"status\") | formatByType(statusColumnFormatEditorConfig)",
"rowColors": "> table | seriesByName(\"status\") | matchValue(statusRowColorsEditorConfig)"
}
}
},
"context": {
"statusColumnFormatEditorConfig": {
"string": {
"unitPosition": "after"
}
},
"statusRowColorsEditorConfig": [
{
"match": "DEGRADED",
"value": "#e85b79"
},
{
"match": "OPERATIONAL",
"value": "#45D4BA"
}
]
}
},
"viz_6upLcH5E": {
"type": "splunk.column",
"title": "Over time tenants degradation events",
"description": "Degradation events happen when the register component reports a failure on a TrackMe job",
"dataSources": {
"primary": "ds_8HIte7Mj"
},
"options": {
"stackMode": "stacked",
"dataValuesDisplay": "all"
}
},
"viz_K39k1shE": {
"type": "splunk.singlevalue",
"dataSources": {
"primary": "ds_gq9ZqVBS"
},
"title": "# Degraded Tenants",
"options": {
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)",
"trendColor": "#45d4ba"
},
"context": {
"majorColorEditorConfig": [
{
"value": "#4fa484",
"to": 1
},
{
"value": "#e85b79",
"from": 1
}
]
}
},
"viz_28VB9M4d": {
"type": "splunk.singlevalue",
"dataSources": {
"primary": "ds_QI1wSZxd"
},
"title": "# Active Tenants",
"description": "",
"options": {
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)"
},
"context": {
"majorColorEditorConfig": [
{
"value": "#e85b79",
"to": 1
},
{
"value": "#45d4ba",
"from": 1
}
]
}
},
"viz_cvPBsXSu": {
"type": "splunk.table",
"dataSources": {
"primary": "ds_NjWl6NcX"
},
"options": {
"columnFormat": {
"overall_ops_pct": {
"data": "> table | seriesByName(\"overall_ops_pct\") | formatByType(overall_ops_pctColumnFormatEditorConfig)",
"rowColors": "> table | seriesByName(\"overall_ops_pct\") | rangeValue(overall_ops_pctRowColorsEditorConfig)"
},
"status": {
"data": "> table | seriesByName(\"status\") | formatByType(statusColumnFormatEditorConfig)",
"rowColors": "> table | seriesByName(\"status\") | matchValue(statusRowColorsEditorConfig)"
}
}
},
"context": {
"overall_ops_pctColumnFormatEditorConfig": {
"number": {
"thousandSeparated": false,
"unitPosition": "after"
}
},
"overall_ops_pctRowColorsEditorConfig": [
{
"value": "#FE3A3A",
"to": 100
},
{
"value": "#45d4ba",
"from": 100
}
],
"statusColumnFormatEditorConfig": {
"string": {
"unitPosition": "after"
}
},
"statusRowColorsEditorConfig": [
{
"match": "OPERATIONAL",
"value": "#45d4ba"
},
{
"match": "DEGRADED",
"value": "#e85b79"
}
]
},
"title": "Detailed job component register statuses"
},
"viz_FUEI8OpS": {
"type": "splunk.image",
"options": {
"preserveAspectRatio": true,
"src": "../../static/app/trackme/icons/trackme.png"
}
}
},
"inputs": {
"input_global_trp": {
"type": "input.timerange",
"options": {
"token": "global_time",
"defaultValue": "-24h@h,now"
},
"title": "Global Time Range"
}
},
"layout": {
"type": "absolute",
"options": {
"height": 1800,
"width": 1920
},
"structure": [
{
"item": "viz_chart_1",
"type": "block",
"position": {
"x": 590,
"y": 90,
"w": 590,
"h": 250
}
},
{
"item": "viz_jn3W19To",
"type": "block",
"position": {
"x": 1190,
"y": 90,
"w": 570,
"h": 250
}
},
{
"item": "viz_6upLcH5E",
"type": "block",
"position": {
"x": 10,
"y": 350,
"w": 1750,
"h": 330
}
},
{
"item": "viz_K39k1shE",
"type": "block",
"position": {
"x": 10,
"y": 220,
"w": 570,
"h": 120
}
},
{
"item": "viz_28VB9M4d",
"type": "block",
"position": {
"x": 10,
"y": 90,
"w": 570,
"h": 120
}
},
{
"item": "viz_cvPBsXSu",
"type": "block",
"position": {
"x": 10,
"y": 690,
"w": 1750,
"h": 970
}
},
{
"item": "viz_FUEI8OpS",
"type": "block",
"position": {
"x": 1630,
"y": 10,
"w": 120,
"h": 60
}
}
],
"globalInputs": [
"input_global_trp"
]
},
"title": "TrackMe - Tenants Operational Status Overview",
"defaults": {
"dataSources": {
"ds.search": {
"options": {
"queryParameters": {
"latest": "$global_time.latest$",
"earliest": "$global_time.earliest$"
}
}
}
}
},
"description": ""
}
]]> </definition>
<meta type="hiddenElements"><![CDATA[
{
"hideEdit": false,
"hideOpenInSearch": false,
"hideExport": false
}
]]> </meta>
</dashboard>