cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Extract IP and Status from CONTENT of dt.system.events to show in a Dashboard

Raj
Helper

Hello All,

I have few entries coming in dt.system.events which are coming from SNMP Generic Device extension and wanted to show in a dashboard like below:

IPStatus
0.0.0.0ERROR
1.1.1.1Successful

 

The entries have all data but I am not able to use DQL Architect to extract information and show in dashboard. Check entries below:

Failed to assign monitoring configuration to ActiveGate. Reason: DEVICE_CONNECTION_ERROR:Status DEVICE_CONNECTION_ERROR (38) returned from 1 agents (0.0.0.0: Agent(0.0.0.0): GetBulk timout args: 1.3.6.1.2.1.1.5.0 : request timeout (after 3 retries) [status code=38]);
Host: 1.1.1.1 Query successful

 Can someone please guide me how to get the table above from the entries shared. Any lead would be appreciated.

2 REPLIES 2

Eric_Yu
Dynatrace Helper
Dynatrace Helper

You can use an additional field as a conditional for your "STATUS", something like this:

 

data record()
| parse content, "WORD:stringStart LD ipaddr:ipv4 LD"
| fieldsAdd Status=if(stringStart== "Failed", "ERROR", else:(if(
                      stringStart== "Host", "Succesful"
                      )))
| fieldsRemove stringStart

 

 

That'd be the case if you only have those two types of records, which are easy to parse.

Eric_Yu_2-1712771109152.png

Removing the unnecessary fields, and you'd get the result you wanted.

Eric_Yu_1-1712770931397.png


Let me know if it helps.

Eric Yu

Raj
Helper

Thanks Eric. It helped. 😊

Featured Posts