Merge pull request #45 from guilhemmarchand/version_1029

Version 1.0.29

docs/releasenotes.rst

@@ -1,6 +1,12 @@
 Release notes
 #############
 
+Version 1.0.29
+==============
+
+- fix: errors in Splunk Mobile dashboard (Any priority SLA alerts singles do not filter on red state)
+- fix: better table rendering in Splunk Mobile dashboard for metric hosts
+
 Version 1.0.28
 ==============
 

trackme/default/app.conf

@@ -16,4 +16,4 @@ label = TrackMe
 [launcher]
 author = Guilhem Marchand
 description = Easy data tracking system for Splunk admins
-version = 1.0.28
+version = 1.0.29

trackme/default/data/ui/views/trackMe_summary.xml

@@ -34,7 +34,7 @@
       <title>Any priority data sources in SLA alert</title>
       <single>
         <search base="baseMainDataSources">
-          <query>stats count</query>
+          <query>| where data_monitored_state="enabled" AND data_source_state="red" | stats count</query>
         </search>
         <option name="colorBy">value</option>
         <option name="colorMode">none</option>
@@ -84,7 +84,7 @@
       <title>Any priority data hosts in SLA alert</title>
       <single>
         <search base="baseMainDataHosts">
-          <query>stats count</query>
+          <query>| where data_monitored_state="enabled" AND data_host_state="red" | stats count</query>
         </search>
         <option name="colorBy">value</option>
         <option name="colorMode">none</option>
@@ -134,7 +134,7 @@
       <title>Any priority metric hosts in SLA alert</title>
       <single>
         <search base="baseMainMetricHosts">
-          <query>stats count</query>
+          <query>| where metric_monitored_state="enabled" AND metric_host_state="red" | stats count</query>
         </search>
         <option name="colorBy">value</option>
         <option name="colorMode">none</option>
@@ -222,9 +222,11 @@
 | eval priority_num=case(priority="low", 2, priority="medium", 1, priority="high", 0)
 | sort limit=0 priority_num, metric_host
 | `trackme_date_format(metric_last_time_seen)`
-| makemv delim="," metric_details
-| fields metric_host  metric_last_lag_seen	"metric_last_time_seen (translated)" metric_details priority
-| rename "* (translated)" as "*"</query>
+| rename "* (translated)" as "*"
+| mvexpand metric_details
+| stats first(priority) as priority, first(metric_last_time_seen) as metric_last_time_seen, dc(metric_category) as count_metric_category, count(eval(match(metric_details, "metric_host_state\=green"))) as count_green, count(eval(match(metric_details, "metric_host_state=green"))) as count_non_green by metric_host
+| eval summary=" metric categories: " . count_metric_category .  ", " . "green state: " . count_green . ", " . "red state: " . count_non_green
+| fields metric_host, metric_last_time_seen, priority, summary</query>
         </search>
         <option name="drilldown">none</option>
       </table>