Search code examples
splunksplunk-query

how to extract value from splunk and generate line graph

My log messages

.o.s.c.PaymentMethodInstrumentController : Exiting ServiceController.getMyServiceDetails() : elapsedTime(ms):34, xrfRequestId:c3b5878d-8795-49cb-b6a7-51ab02789f46, xCorrelationId:786d68ea-ze46-42b9-966f-124f2eb444f6, xForwardedFor:10.242.79.96

.o.s.c.PaymentMethodInstrumentController : Exiting ServiceController.getMyServiceDetails() : elapsedTime(ms):39, xrfRequestId:c3b2c08d-6c6d-49cb-b6a7-51a89897446, xCorrelationId:78676yt64-ze46-42b9-966f-124f2eb444f6, xForwardedFor:10.242.79.96

I am looking to extract elapsedTime(ms):34 and generate the line graph of these values.

Solution

  • Assuming you already have _time, something like that:

    <your search>
| rex "elapsedTime(ms):(?<elapsedTime>\d+),"
| table _time elapsedTime