Sample Splunk Queries

index="lamaxu" sourcetype="qmstatus_json" "identifier.dataType"=QUEUE_STATUS attributes.IPPROCS!=-1 |rename identifier.dataSource as qmgrName|rename attributes.QUEUE as queueName|rename attributes.IPPROCS as Consumers| eval objName="(".qmgrName.") ".queueName|chart max(Consumers) as Consumers BY objName

index="lamaxu" sourcetype="qmstatus_json" "identifier.dataType"=QUEUE_STATUS attributes.OPPROCS!=-1 |rename identifier.dataSource as qmgrName|rename attributes.QUEUE as queueName|rename attributes.OPPROCS as Producers| eval objName="(".qmgrName.") ".queueName|chart max(Producers) as Producers BY objName

Sample Dashboard

Sample Dashboard Source

<dashboard>
  <label>Queue Consumer Counts</label>
  <row>
    <panel>
      <title>Queue Consumer Counts</title>
      <single>
        <title>Queue Consumer Counts (IPPROCS)</title>
        <search>
          <query>index="lamaxu" sourcetype="qmstatus_json" "identifier.dataType"=QUEUE_STATUS attributes.IPPROCS!=-1 |rename identifier.dataSource as qmgrName|rename attributes.QUEUE as queueName|rename attributes.IPPROCS as Consumers| eval objName="(".qmgrName.") ".queueName|chart max(Consumers) as Consumers BY objName</query>
          <earliest>rt-5m</earliest>
          <latest>rt</latest>
          <sampleRatio>1</sampleRatio>
          <refresh>2m</refresh>
          <refreshType>delay</refreshType>
        </search>
        <option name="colorBy">value</option>
        <option name="colorMode">block</option>
        <option name="drilldown">all</option>
        <option name="height">310</option>
        <option name="rangeColors">["0xd93f3c","0x65a637"]</option>
        <option name="rangeValues">[0]</option>
        <option name="refresh.display">progressbar</option>
        <option name="showSparkline">0</option>
        <option name="showTrendIndicator">0</option>
        <option name="trellis.enabled">1</option>
        <option name="trellis.scales.shared">0</option>
        <option name="trellis.size">small</option>
        <option name="trendColorInterpretation">standard</option>
        <option name="trendInterval">-1m</option>
        <option name="underLabel">Consumers</option>
        <option name="unitPosition">after</option>
        <option name="useColors">1</option>
      </single>
    </panel>
  </row>
  <row>
    <panel>
      <title>Queue Producer Counts</title>
      <single>
        <title>Queue Producer Counts (OPPROCS)</title>
        <search>
          <query>index="lamaxu" sourcetype="qmstatus_json" "identifier.dataType"=QUEUE_STATUS attributes.OPPROCS!=-1 |rename identifier.dataSource as qmgrName|rename attributes.QUEUE as queueName|rename attributes.OPPROCS as Producers| eval objName="(".qmgrName.") ".queueName|chart max(Producers) as Producers BY objName</query>
          <earliest>rt-5m</earliest>
          <latest>rt</latest>
          <sampleRatio>1</sampleRatio>
          <refresh>2m</refresh>
          <refreshType>delay</refreshType>
        </search>
        <option name="colorBy">value</option>
        <option name="colorMode">block</option>
        <option name="drilldown">all</option>
        <option name="height">334</option>
        <option name="rangeColors">["0xd93f3c","0x65a637"]</option>
        <option name="rangeValues">[0]</option>
        <option name="refresh.display">progressbar</option>
        <option name="showSparkline">0</option>
        <option name="showTrendIndicator">0</option>
        <option name="trellis.enabled">1</option>
        <option name="trellis.scales.shared">0</option>
        <option name="trellis.size">small</option>
        <option name="trendColorInterpretation">standard</option>
        <option name="trendInterval">-1m</option>
        <option name="underLabel">Consumers</option>
        <option name="unitPosition">after</option>
        <option name="useColors">1</option>
      </single>
    </panel>
  </row>
</dashboard>
  • No labels