Task #1448
Create search to show invocations of test attempts
Start date:
08/27/2016
Due date:
% Done:
0%
Description
Might want to use a different sourcetype or source.
History
#1
Updated by Luke Murphey over 7 years ago
Updated by sourcetype=smartmon | rex "LBA_of_first_error\n(?<logs>(#[ ]*[0-9]+[^\n]*\n)+)" | rex field=logs max_match=1 "(?<log>[^\n]+)\n" | mvexpand log | rex max_match=1 field=log "#[ ]*(?<test_number>([0-9]+))[ ]+(?<test_description>([-_a-zA-Z 0-9()]+))[ ]+(?<remaining>([0-9]+[%]))[ ]+(?<lifetime_hours>([0-9]+))[ ]+(?<lba_of_first_error>(.*))" | stats latest(Device_Model) as Device_Model latest(Model_Family) as Model_Family latest(host) as host earliest(_time) as time by Serial_Number lifetime_hours | convert ctime(time)