Skip to content

Commit b69c48b

Browse files
committed
Update integration_overview.xml
Fixes #45 , Updated the searches to use updated add-on naming.
1 parent fe9a7d0 commit b69c48b

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

github_app_for_splunk/default/data/ui/views/integration_overview.xml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@
2727
<panel>
2828
<single>
2929
<search>
30-
<query>index=_internal component=ExecProcessor "TA_splunk_ghe_audit_log_monitoring" "stream_events(): Fetched:" OR "API Rate limits"| rex "\'x_rl_limit\'\: \'(?&lt;x_rl_limit&gt;\d+?)\', \'x_rl_remainig\'\: \'(?&lt;x_rl_remaining&gt;\d+?)\', 'x_rl_reset_timestamp\'\: \'(?&lt;x_rl_reset_timestamp&gt;\d+?)\', \'x_rl_used\'\: \'(?&lt;x_rl_used&gt;\d+?)\'" | rex "stream_events\(\)\: Fetched: (?&lt;event_count&gt;\d+?) events" | timechart sum(event_count) as fetched_event max(x_rl_limit) as x_rl_limit, min(x_rl_remaining) as x_rl_remaining, max(x_rl_used) as x_rl_used | stats max(x_rl_limit) as "Rate Limit", avg(x_rl_used) as "Average Rate Limit Used", min(fetched_event) as "Minimum Fetched Events", avg(fetched_event) as "Average Fetched Events", max(fetched_event) as "Maximum Fetched Events"</query>
30+
<query>index=_internal component=ExecProcessor "github-audit-log-monitoring-add-on-for-splunk" "stream_events(): Fetched:" OR "API Rate limits"| rex "\'x_rl_limit\'\: \'(?&lt;x_rl_limit&gt;\d+?)\', \'x_rl_remainig\'\: \'(?&lt;x_rl_remaining&gt;\d+?)\', 'x_rl_reset_timestamp\'\: \'(?&lt;x_rl_reset_timestamp&gt;\d+?)\', \'x_rl_used\'\: \'(?&lt;x_rl_used&gt;\d+?)\'" | rex "stream_events\(\)\: Fetched: (?&lt;event_count&gt;\d+?) events" | timechart sum(event_count) as fetched_event max(x_rl_limit) as x_rl_limit, min(x_rl_remaining) as x_rl_remaining, max(x_rl_used) as x_rl_used | stats max(x_rl_limit) as "Rate Limit", avg(x_rl_used) as "Average Rate Limit Used", min(fetched_event) as "Minimum Fetched Events", avg(fetched_event) as "Average Fetched Events", max(fetched_event) as "Maximum Fetched Events"</query>
3131
<earliest>-24h@h</earliest>
3232
<latest>now</latest>
3333
<sampleRatio>1</sampleRatio>
@@ -57,7 +57,7 @@
5757
<title>Rate Limit Usage</title>
5858
<chart>
5959
<search>
60-
<query>index=_internal component=ExecProcessor "TA_splunk_ghe_audit_log_monitoring" "API Rate limits"| rex "\'x_rl_limit\'\: \'(?&lt;x_rl_limit&gt;\d+?)\', \'x_rl_remainig\'\: \'(?&lt;x_rl_remaining&gt;\d+?)\', 'x_rl_reset_timestamp\'\: \'(?&lt;x_rl_reset_timestamp&gt;\d+?)\', \'x_rl_used\'\: \'(?&lt;x_rl_used&gt;\d+?)\'" | timechart max(x_rl_limit) as "Rate Limit", min(x_rl_remaining) as "Rate Limit Remaining", max(x_rl_used) as "Rate Limit Used"</query>
60+
<query>index=_internal component=ExecProcessor "github-audit-log-monitoring-add-on-for-splunk" "API Rate limits"| rex "\'x_rl_limit\'\: \'(?&lt;x_rl_limit&gt;\d+?)\', \'x_rl_remainig\'\: \'(?&lt;x_rl_remaining&gt;\d+?)\', 'x_rl_reset_timestamp\'\: \'(?&lt;x_rl_reset_timestamp&gt;\d+?)\', \'x_rl_used\'\: \'(?&lt;x_rl_used&gt;\d+?)\'" | timechart max(x_rl_limit) as "Rate Limit", min(x_rl_remaining) as "Rate Limit Remaining", max(x_rl_used) as "Rate Limit Used"</query>
6161
<earliest>$timeRng.earliest$</earliest>
6262
<latest>$timeRng.latest$</latest>
6363
<sampleRatio>1</sampleRatio>
@@ -101,7 +101,7 @@
101101
<title>Fetched Events</title>
102102
<chart>
103103
<search>
104-
<query>index=_internal component=ExecProcessor "TA_splunk_ghe_audit_log_monitoring" "stream_events(): Fetched:" | rex "stream_events\(\)\: Fetched: (?&lt;event_count&gt;\d+?) events" | timechart sum(event_count) as fetched_event</query>
104+
<query>index=_internal component=ExecProcessor "github-audit-log-monitoring-add-on-for-splunk" "stream_events(): Fetched:" | rex "stream_events\(\)\: Fetched: (?&lt;event_count&gt;\d+?) events" | timechart sum(event_count) as fetched_event</query>
105105
<earliest>$timeRng.earliest$</earliest>
106106
<latest>$timeRng.latest$</latest>
107107
<sampleRatio>1</sampleRatio>

0 commit comments

Comments
 (0)