Merge pull request #32 from criblio/reductions

Route/Pipeline Reductions Dashboard
criblio · Oct 22, 2024 · 67ad750 · 67ad750
2 parents d98ae96 + 74586cf
commit 67ad750
Show file tree

Hide file tree

Showing 7 changed files with 980 additions and 2 deletions.
diff --git a/criblvision.spl b/criblvision.spl
diff --git a/criblvision/default/app.conf b/criblvision/default/app.conf
@@ -4,7 +4,7 @@
 
 [id]
 name = criblvision
-version = 4.0.0
+version = 4.1.0
 
 [install]
 is_configured = false
@@ -17,7 +17,7 @@ setup_view = criblvision_setup_page
 [launcher]
 author = Johan Woger
 description = The Splunk on Stream app provides insight into your Cribl Stream Environment based on Stream's internal logs and metrics. The dashboards included in this app will help you quickly identify and troubleshoot issue with your deployment. 
-version = 4.0.0
+version = 4.1.0
 
 [package]
 id = criblvision

diff --git a/criblvision/default/data/ui/nav/default.xml b/criblvision/default/data/ui/nav/default.xml
@@ -10,6 +10,7 @@
   </collection>
   <collection label="Configuration">
     <view name="sources_and_destinations_overview" />
+    <view name="route_and_pipeline_reductions" />
     <view name="splunk_destination_troubleshooting" />
   </collection>
   <collection label="Performance">

diff --git a/criblvision/default/data/ui/views/route_and_pipeline_reductions.xml b/criblvision/default/data/ui/views/route_and_pipeline_reductions.xml
diff --git a/criblvision/default/macros.conf b/criblvision/default/macros.conf
@@ -61,6 +61,17 @@ definition = lookup cribl_stream_assets environment AS $environment$ OUTPUTNEW h
 | eval hosts = "\"".mvjoin(hosts, "\", \"")."\""
 iseval = 0
 
+[process_bytes(2)]
+args = bytes_field,bytes_unit
+definition = $bytes_field$ = $bytes_field$ / pow(1024, case(lower("$bytes_unit$") == "kb", 1, lower("$bytes_unit$") == "mb", 2, lower("$bytes_unit$") == "gb", 3, lower("$bytes_unit$") == "tb", 4, lower("$bytes_unit$") == "pb", 5, lower("$bytes_unit$") == "eb", 6, lower("$bytes_unit$") == "zb", 7, lower("$bytes_unit$") == "yb", 8, lower("$bytes_unit$") == "rb", 9, lower("$bytes_unit$") == "qb", 10, true(), 0))
+iseval = 0
+errormsg = The bytes unit "$bytes_unit$" is not valid
+validation = match($bytes_unit$, "(?i)[KMGTPEZYRQ]?B")
+
+[set_bytes_unit]
+definition = "GB"
+iseval = 0
+
 ### ALERT MACROS ###
 
 # general macros used across alerts

diff --git a/criblvision/default/transforms.conf b/criblvision/default/transforms.conf
@@ -8,3 +8,7 @@ batch_index_query = 0
 case_sensitive_match = 1
 filename = cribl_stream_assets.csv
 
+[bytes_units]
+batch_index_query = 0
+case_sensitve_match = 0
+filename = bytes_units.csv
diff --git a/criblvision/lookups/bytes_units.csv b/criblvision/lookups/bytes_units.csv
@@ -0,0 +1,12 @@
+abbreviated_unit,unit
+B,Bytes
+KB,Kilobytes
+MB,Megabytes
+GB,Gigabytes
+TB,Terabytes
+PB,Petabytes
+EB,Exabytes
+ZB,Zettabytes
+YB,Yottabytes
+RB,Ronnabytes
+QB,Quettabytes