Real Time Message Count dashboard widget does not reflect proper data in TIBCO LogLogic LMI
Article ID: KB0077412
Updated On:
| Products | Versions |
|---|---|
| TIBCO LogLogic Enterprise Virtual Appliance | 6.2.1 |
Description
The advanced dashboard widget graphs for "Ingested and Indexed Message Count" and "Real Time - Message Count - Last 24 hours" should show the essentially the same general graph data when only syslog data is being collected by the appliance. However, the Real Time Message Count graph will not reflect the same data as the other one due to a defect in the SQL query.
Issue/Introduction
The dashboard widget query for the Real Time Message Count widget is incorrect which causes the graph to show incorrect information. This article describes how to fix it.
Environment
Only affects LMI 6.2.1 and only applies if advanced features are enabled.
Resolution
Follow this procedure to resolve this issue.
1. Open /loglogic/logu/configurator/lib/default.conf for editing. You can make a copy of the file first if you prefer.
2. Search for "Real Time" within this file. It should be on line 67.
3. Move to the "query" line as shown below, which is on line 70.
[snip]
"title": "Real Time - Message Count - Last 24 Hours",
"type": "Bar",
"widgetConfiguration": {
"query": "use LogLogic_System_RealTime_Message_Rate | GROUP BY HOURS(lls_time, 1) | COLUMNS HOURS(lls_time, 1) AS Time, AVG(lls_msgCount) AS Ingested, AVG(lls_indexedMsgCount) AS Indexed | lls_time IN -24h",
"timeFilter": "",
[snip]
4. Change the AVG (in bold above) function to a SUM function as shown below.
[snip]
"title": "Real Time - Message Count - Last 24 Hours",
"type": "Bar",
"widgetConfiguration": {
"query": "use LogLogic_System_RealTime_Message_Rate | GROUP BY HOURS(lls_time, 1) | COLUMNS HOURS(lls_time, 1) AS Time, SUM(lls_msgCount) AS Ingested, AVG(lls_indexedMsgCount) AS Indexed | lls_time IN -24h",
"timeFilter": "",
[snip]
5. Save and exit the file. In HA configuration the file will need to be edited on both appliances because it does not get replicated.
6. To apply the change requires restarting lldaemon on each node:
$ mtask -s engine_lldaemon restart
1. Open /loglogic/logu/configurator/lib/default.conf for editing. You can make a copy of the file first if you prefer.
2. Search for "Real Time" within this file. It should be on line 67.
3. Move to the "query" line as shown below, which is on line 70.
[snip]
"title": "Real Time - Message Count - Last 24 Hours",
"type": "Bar",
"widgetConfiguration": {
"query": "use LogLogic_System_RealTime_Message_Rate | GROUP BY HOURS(lls_time, 1) | COLUMNS HOURS(lls_time, 1) AS Time, AVG(lls_msgCount) AS Ingested, AVG(lls_indexedMsgCount) AS Indexed | lls_time IN -24h",
"timeFilter": "",
[snip]
4. Change the AVG (in bold above) function to a SUM function as shown below.
[snip]
"title": "Real Time - Message Count - Last 24 Hours",
"type": "Bar",
"widgetConfiguration": {
"query": "use LogLogic_System_RealTime_Message_Rate | GROUP BY HOURS(lls_time, 1) | COLUMNS HOURS(lls_time, 1) AS Time, SUM(lls_msgCount) AS Ingested, AVG(lls_indexedMsgCount) AS Indexed | lls_time IN -24h",
"timeFilter": "",
[snip]
5. Save and exit the file. In HA configuration the file will need to be edited on both appliances because it does not get replicated.
6. To apply the change requires restarting lldaemon on each node:
$ mtask -s engine_lldaemon restart
Additional Information
LLLM-11022
Feedback
Yes
No
Powered by
