This message originated from Cribl Community Slack.
Click here to view the original link.
what would be the best way to report on log stats (volume, drops) for a period of a year? Should I just query an endpoint and save them to a lookup, or is there a way to do it that won’t take forever to run a report. I’d probably want avgs/peaks and also by some other criteria (routes, destinations). I know cribl vsision can do a lot of this, but my concern is that rrunning it ffor longer periods of time would take forever.
Solved
Cribl Vision Performance Concerns For Yearly Log Stats Reporting
Best answer by Jon Rust
Metrics source -> rollup or agg function to reduce frequency -> obj store
optionally run a report daily and re-save in obj store as a daily roll-up
then report on those daily numbers for your annual run
Metrics source -> rollup or agg function to reduce frequency -> obj store
optionally run a report daily and re-save in obj store as a daily roll-up
then report on those daily numbers for your annual run
Our new Cribl Insights feature (coming in preview at the end of January for Cribl Cloud/Hybrid customers and generally available in February) will visualize these metrics for you for free for 7 days with the option to use credits to pay for 365 days.
Here is a 45 second video: https://www.youtube.com/watch?v=pezve72RnwI
Here is a 35 min video from CriblCon: https://www.youtube.com/watch?v=UUhozoIx0E4
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.