Sample Splunk Query

index="lamaxu" sourcetype="qmstatus_json" "identifier.dataType"=QUEUE_STATUS  attributes.CURDEPTH!=-1|rename identifier.dataSource as qmgrName|rename attributes.QUEUE as queueName|rename attributes.CURDEPTH as curDepth| eval label=qmgrName.":".queueName|chart useother=f max(curDepth) BY label limit=1000

Sample Dashboard

Sample Dashboard Source

<dashboard>
  <label>Current Queue Depth</label>
  <row>
    <panel>
      <title>Current Queue Depths</title>
      <single>
        <title>Current Queue Depth (CURDEPTH)</title>
        <search>
          <query>index="lamaxu" sourcetype="qmstatus_json" "identifier.dataType"=QUEUE_STATUS  attributes.CURDEPTH!=-1|rename identifier.dataSource as qmgrName|rename attributes.QUEUE as queueName|rename attributes.CURDEPTH as curDepth| eval label=qmgrName.":".queueName|chart useother=f max(curDepth) BY label limit=1000</query>
          <earliest>rt-5m</earliest>
          <latest>rt</latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="colorBy">value</option>
        <option name="colorMode">block</option>
        <option name="drilldown">none</option>
        <option name="numberPrecision">0</option>
        <option name="rangeColors">["0x65a637","0x6db7c6","0xf7bc38","0xf58f39","0xd93f3c"]</option>
        <option name="rangeValues">[20,30,100,200]</option>
        <option name="showSparkline">1</option>
        <option name="showTrendIndicator">1</option>
        <option name="trellis.enabled">1</option>
        <option name="trellis.scales.shared">0</option>
        <option name="trellis.size">small</option>
        <option name="trendColorInterpretation">standard</option>
        <option name="trendDisplayMode">absolute</option>
        <option name="underLabel">Current Depth</option>
        <option name="unitPosition">after</option>
        <option name="useColors">1</option>
        <option name="useThousandSeparators">1</option>
      </single>
    </panel>
  </row>
</dashboard>
  • No labels