Skip to content

Commit 1f53491

Browse files
mcgrail-s1mcgrail-s1
committed
compare splunk stas alongside powerquery
1 parent 3c35d37 commit 1f53491

File tree

1 file changed

+137
-0
lines changed

1 file changed

+137
-0
lines changed

‎Splunk Dashboards/comparing_performance.xml‎

Lines changed: 137 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,137 @@
1+
<form version="1.1">
2+
<label>Performance Comparison</label>
3+
<fieldset submitButton="false"></fieldset>
4+
<row depends="$invisible$">
5+
<panel>
6+
<html>
7+
<style>
8+
#baseQuery .splunk-textinput input{ width: 600px; !important; }
9+
.dashboard-panel h2{
10+
background:#0000ff !important;
11+
color:white !important;
12+
text-align: left !important;
13+
font-weight: bold !important;
14+
border-top-right-radius: 15px;
15+
border-top-left-radius: 15px;
16+
}
17+
</style>
18+
</html>
19+
</panel>
20+
</row>
21+
<row>
22+
<panel>
23+
<title>Splunk Index Seach</title>
24+
<input type="time" token="splk_time" searchWhenChanged="true">
25+
<label></label>
26+
<default>
27+
<earliest>-6h@h</earliest>
28+
<latest>now</latest>
29+
</default>
30+
</input>
31+
<table>
32+
<title>($splk_timing$ seconds)</title>
33+
<search>
34+
<done>
35+
<set token="splk_timing">$job.runDuration$</set>
36+
<set token="splk_count">$job.resultCount$</set>
37+
</done>
38+
<query>index=dataset logfile="slo_tx" | spath | stats count by attributes.statusCode | addcoltotals labelfield=attributes.statusCode label="Total"</query>
39+
<earliest>$splk_time.earliest$</earliest>
40+
<latest>$splk_time.latest$</latest>
41+
</search>
42+
<option name="drilldown">none</option>
43+
<option name="refresh.display">progressbar</option>
44+
<format type="number" field="count">
45+
<option name="precision">0</option>
46+
</format>
47+
</table>
48+
</panel>
49+
<panel>
50+
<title>DataSet PowerQuery Search</title>
51+
<input type="time" token="pq_time">
52+
<label></label>
53+
<default>
54+
<earliest>-6h@h</earliest>
55+
<latest>now</latest>
56+
</default>
57+
</input>
58+
<table>
59+
<title>($pq_timing$ seconds)</title>
60+
<search>
61+
<done>
62+
<set token="pq_timing">$job.runDuration$</set>
63+
<set token="pq_count">$job.resultCount$</set>
64+
</done>
65+
<query>| dataset method="powerquery" search="logfile='slo_tx' | group count=count() by statusCode" | spath | table statusCode count | addcoltotals labelfield=statusCode label="Total"</query>
66+
<earliest>$pq_time.earliest$</earliest>
67+
<latest>$pq_time.latest$</latest>
68+
</search>
69+
<option name="drilldown">none</option>
70+
<option name="refresh.display">progressbar</option>
71+
<format type="number" field="count">
72+
<option name="precision">0</option>
73+
</format>
74+
</table>
75+
</panel>
76+
</row>
77+
<row>
78+
<panel>
79+
<title>Estimated Splunk Data Volume [ len(_raw) ]</title>
80+
<single>
81+
<title>($splk_timing2$ seconds)</title>
82+
<search>
83+
<query>index=dataset logfile="slo_tx"
84+
| eval esize=len(_raw)
85+
| stats count as count avg(esize) as avg
86+
| eval bytes=count*avg
87+
| eval kb=bytes/1024
88+
| eval mb=kb/1024
89+
| eval gb=mb/1024
90+
| eval tb=gb/1024
91+
| stats values(gb) as GB
92+
| eval GB=round(GB,4)</query>
93+
<earliest>$splk_time.earliest$</earliest>
94+
<latest>$splk_time.latest$</latest>
95+
<done>
96+
<set token="splk_timing2">$job.runDuration$</set>
97+
<set token="splk_count2">$job.resultCount$</set>
98+
</done>
99+
</search>
100+
<option name="drilldown">none</option>
101+
<option name="numberPrecision">0.0000</option>
102+
<option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
103+
<option name="unit">GB</option>
104+
</single>
105+
</panel>
106+
<panel>
107+
<title>Estimated DataSet Data Volume [ len(message) ]</title>
108+
<single>
109+
<title>($pq_timing$ seconds)</title>
110+
<search>
111+
<query>| dataset method="powerquery" search="logfile='slo_tx' | let msg_size=len(message) | group esize=sum(msg_size)"
112+
| spath
113+
114+
| stats count as count avg(esize) as avg
115+
| eval bytes=count*avg
116+
| eval kb=bytes/1024
117+
| eval mb=kb/1024
118+
| eval gb=mb/1024
119+
| eval tb=gb/1024
120+
| stats values(gb) as GB
121+
| eval GB=round(GB,4)</query>
122+
<earliest>$pq_time.earliest$</earliest>
123+
<latest>$pq_time.latest$</latest>
124+
<done>
125+
<set token="pq_timing2">$job.runDuration$</set>
126+
<set token="pq_count2">$job.resultCount$</set>
127+
</done>
128+
</search>
129+
<option name="drilldown">none</option>
130+
<option name="numberPrecision">0.0000</option>
131+
<option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
132+
<option name="refresh.display">progressbar</option>
133+
<option name="unit">GB</option>
134+
</single>
135+
</panel>
136+
</row>
137+
</form>

0 commit comments

Comments
 (0)