Hi Jochen,
thanks for the answer even if it kinda confuses me because i just thought
that i found it ( i was just getting back to write a follow up )
at extractor->metrics->total->total for example :
{
"extractors": [
{
"condition_type": "regex",
"condition_value": ".*sudo:.*COMMAND.*",
"converter_exceptions": 0,
"converters": [],
"creator_user_id": "nobody",
"cursor_strategy": "copy",
"exceptions": 0,
"extractor_config": {
"index": 4,
"split_by": ":"
},
"id": "eaa96f00-86c5-11e5-bea8-9cb654863550",
"metrics": {
"converters": {
"duration_unit": "microseconds",
"rate": {
"fifteen_minute": 2.628096090618024,
"five_minute": 2.6797741977955476,
"mean": 2.5204701415859283,
"one_minute": 2.5127411385313398,
"total": 24123.0
},
"rate_unit": "events/second",
"time": {
"95th_percentile": 0.0,
"98th_percentile": 0.0,
"99th_percentile": 0.0,
"max": 0.0,
"mean": 0.0,
"min": 0.0,
"std_dev": 0.0
}
},
"total": {
"duration_unit": "microseconds",
"rate": {
"fifteen_minute": 2.628096090618024,
"five_minute": 2.6797741977955476,
"mean": 2.5204710120771159,
"one_minute": 2.5127411385313398,
"total": 24123.0
},
"rate_unit": "events/second",
"time": {
"95th_percentile": 33.0,
"98th_percentile": 98.0,
"99th_percentile": 121.0,
"max": 564.0,
"mean": 20.0,
"min": 8.0,
"std_dev": 27.0
}
}
},
"order": 1,
"source_field": "message",
"target_field": "sudo_user",
"title": "system_messages_sudo_user",
"type": "split_and_index"
},
[...]
Am Mittwoch, 20. April 2016 14:28:38 UTC+2 schrieb Jochen Schalanda:
>
> Hi Jan,
>
> the number of executions per extractor is currently not recorded in
> Graylog.
>
> Cheers,
> Jochen
>
> On Wednesday, 20 April 2016 11:25:26 UTC+2, Jan Meerkamp wrote:
>>
>> Heay
>>
>> I am trying to get some extractor metrics via Rest API and i am able to
>> get the times with
>> GraylogIP:port/system/inputs({inputID}/extractors/{extractorID} but i cant
>> find the invocations.
>>
>> Is it possible to get the invocations via Rest API ?
>>
>> The Cluster is running Graylog 1.2.2.
>>
>> Jan
>>
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/6b5ee193-f468-4f15-9607-af1e640364c8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
