Splunk MINT is no longer available for purchase as of January 29, 2021. Customers who have already been paying to ingest and process MINT data in Splunk Enterprise will continue to receive support until December 31, 2021, which is End of Life for all MINT products: App, Web Service (Management Console), SDK and Add-On.

The MINT data model
The fields and tags in the MINT data model describe the events used by Splunk MINT.
- Note Do not edit this data model. Any changes could impact and alter the functionality of the Splunk MINT App.
Tags used with the MINT event category
Object names | Tag name | Required? |
---|---|---|
All_MINT
Usage |
mint | YES |
usage | YES | |
All_MINT
Performance |
mint | YES |
performance | YES |
Sourcetypes used with the MINT event category
Object names | Display name | Search |
---|---|---|
Session > Pings | Sessions Starts | sourcetype=mint:ping |
Session > Gnips | Sessions Stops | sourcetype=mint:gnip |
Events | Events | sourcetype=mint:event |
Errors | Errors | sourcetype=mint:error |
Transaction > TransactionStop | Transactions Stop | sourcetype=mint:trstop |
Transaction > TransactionStart | Transactions Start | sourcetype=mint:trstart |
Network_Monitoring | Network Monitoring | sourcetype=mint:network |
View | Views | sourcetype=mint:view |
Fields for the MINT event category
Object name | Display name | Field name | Type | Description |
---|---|---|---|---|
All_MINT | App User ID | uuid
|
string | A unique user identifier. |
All_MINT | App Version | appVersionName
|
string | The app version name. |
All_MINT | Carrier | carrier
|
string | The mobile carrier. |
All_MINT | City | remoteIP_City
|
string | The Geo IP-derived city (calculated from RemoteIP ).
|
All_MINT | Connection Type | connection
|
string | The type of connection (such as "WiFi" or "UMTA"). |
All_MINT | Country | remoteIP_Country
|
string | The Geo IP-derived country (calculated from RemoteIP ).
|
All_MINT | Current View | currentView
|
string | The current view |
All_MINT | Device | device
|
string | The mobile device type. |
All_MINT | Latitude | remoteIP_lat
|
number | The Geo IP-derived latitude (calculated from RemoteIP ).
|
All_MINT | Locale | locale
|
string | The device's locale. |
All_MINT | Longtitude | remoteIP_lon
|
number | The Geo IP-derived longtitude (calculated from RemoteIP ).
|
All_MINT | Network State | state
|
string | The connection state (such as "Connecting" or "Connected"). |
All_MINT | Application Environment | appEnvironment
|
string | The application environment ("Release", "Staging", "UserAcceptanceTesting", "Testing", "Development", or a custom string). |
All_MINT | OS Version | osVersion
|
string | The version of the device operating system. |
All_MINT | Package | packageName
|
string | The package or binary name of the app. |
All_MINT | Platform | platform
|
string | The app platform ("Android", "iOS" or "WP"). |
All_MINT | Region | remoteIP_Region
|
string | The Geo IP-derived region (calculated from RemoteIP ).
|
All_MINT | Remote IP | remoteIP
|
ipv4 | The remote IP address. |
All_MINT | User Identifier | userIdentifier
|
string | The user identifier set by the developer. |
All_MINT | Version Code | appVersionCode
|
string | The app version code. |
Errors | Available Memory (MB) | memAppAvailable
|
number | The number of bytes currently available on the heap without expanding the heap. |
Errors | Error Message | message
|
string | The error message. |
Errors | Error Origin | where
|
string | The origin where the error occurred. |
Errors | errorHash | errorHash
|
string | The error hash, which MINT creates for grouping errors. |
Errors | Exception Class | klass
|
string | The class of the exception. |
Errors | Handled | handled
|
string | Whether the error was handled. |
Errors | Max Memory (MB) | memAppMax
|
number | The maximum number of bytes the heap can expand to. |
Errors | System Memory (MB) | memSysTotal
|
number | The number of bytes in device memory. |
Errors | Time until crash | msFromStart
|
number | The time between starting the app and the exception, in milliseconds. |
Errors | Used Memory (MB) | memAppTotal
|
number | The number of bytes taken by the heap at its current size. |
Events | Event Name | event_name
|
string | The event name. |
Events | Level | level
|
string | The log level of the event: V" (Verbose), "D" (Debug), "I" (Info), "N" (Notice), "W" (Warning), "E" (Error), "C" (Critical), "A" (Alert), "E!" (Emergency). |
Gnips | Session Duration | ses_duration
|
number | The session duration, in milliseconds. |
Network_Monitoring | Domain | domain
|
string | The URI domain (calculated from url ).
|
Network_Monitoring | Failed | failed
|
boolean | Whether the request failed. |
Network_Monitoring | HTTP Status Code | statusCode
|
string | The HTTP response status code. |
Network_Monitoring | Latency | latency
|
number | The network service latency. |
Network_Monitoring | Network Exception | exception
|
string | The contents of the HTTP exception that occurred. |
Network_Monitoring | Path | path
|
string | The URI path (calculated from url ).
|
Network_Monitoring | Request Length (bytes) | requestLength
|
number | The length of the request, in bytes. |
Network_Monitoring | Response Length | responseLength
|
number | The length of the response, in bytes. |
Network_Monitoring | URL | url
|
string | The request URL. |
Session | Session Id | session_id
|
string | The session ID. |
Transaction | Transaction Id | transaction_id
|
string | The transaction ID. |
Transaction | Transaction Name | tr_name
|
string | The transaction name. |
TransactionStop | Cancellation Reason | cancellationReason
|
string | The user-defined reason for the transaction cancellation. |
TransactionStop | Failure Error ID | failureErrorID
|
string | The error ID for the transaction failure. |
TransactionStop | Stop Reason | reason
|
string | The reason for the transaction stop. |
TransactionStop | Transaction Duration | tr_duration
|
number | The duration of the transaction, in milliseconds. |
TransactionStop | Transaction Status | status
|
string | The transaction status (SUCCESS, FAIL, CANCEL). |
View | Current | current
|
string | The name of the current view. |
View | DOM Processing Time | domProcessingTime
|
number | Time, in seconds. |
View | Domain Lookup Time | domainLookupTime
|
number | Time, in seconds. |
View | Elapsed Time | elapsedTime
|
number | The time between two views, in milliseconds. |
View | Load Time | loadTime
|
number | The time it took for a view to load. |
View | Previous | previous
|
string | The name of the previous view. |
View | Server Time | serverTime
|
number | Time, in seconds. |
View | View Source | host
|
string | The string of the host, or "NA". |
Last modified on 09 March, 2016
PREVIOUS MINT user roles |
NEXT Send usage data to Splunk |
This documentation applies to the following versions of Splunk MINT™ App (Legacy): 2.1.0, 2.2.0, 2.2.1, 3.0.0, 3.0.1, 3.0.2
Feedback submitted, thanks!