DevOps Articles

My best Splunk queries — Part I.

We use Splunk day to day, and having a perfect query for every occasion helps us big time with monitoring, debugging, issue tracking, especially that Google Analytics has a hard position for upcoming iOS changes. We use Apache logs for index, and track custom events hitting a self hosted tracking pixel with different parameters.

In this search we use a Regular expression for getting the version of Chrome, and storing it to field `chromeversion`, and then using the count by day to display charts.

We want to display ratio of ”token-error” and ”AppInit”, so we need to search for any of those 2, so the evals will run faster.

This is a very nice way to compare performance of KPIs between releases, and making sure everything is behaving as expected.