https://community.splunk.com/t5/Getting-Data-In/Scripting-in-metrics-with-Splunk/m-p/317688#M59400 <P>As @richgalloway said in hist comment, in 7.0.0, you can only send one <CODE>_value</CODE> and one <CODE>measurement</CODE> in each metric event, but theoretically you can have as many dimensions (columns/tags/fields) as you want.</P> <P>You could parse <CODE>top</CODE> output and send each row separately with the same timestamp. Each column would be a dimension but you would need to determine what you are sending as the <CODE>_value</CODE> field in this case. Not really sure what the point of this would be, but it is doable. </P> Thu, 19 Oct 2017 14:07:49 GMT rjthibod 2017-10-19T14:07:49Z https://community.splunk.com/t5/Getting-Data-In/Scripting-in-metrics-with-Splunk/m-p/317686#M59398 <P>All, </P> <P>Still getting my head around metrics. I shameless stole this line of bash and setup metrics and it's working . UI was cool. </P> <PRE><CODE>echo "mydesktop.cpu.util:$intCount|c" | nc -w 1 -u myheavyforwarders.domain.com 8125 </CODE></PRE> <P>With this in mind how would I send more than one metric? Say I wanted all the output of TOP? Can you send more than one metric at a time? I understand these metric can have dimension, is that basically an array of values? </P> Wed, 18 Oct 2017 23:05:46 GMT https://community.splunk.com/t5/Getting-Data-In/Scripting-in-metrics-with-Splunk/m-p/317686#M59398 daniel333 2017-10-18T23:05:46Z https://community.splunk.com/t5/Getting-Data-In/Scripting-in-metrics-with-Splunk/m-p/317687#M59399 <P>As I understand metrics, each "event" is a single value. Dimensions describe the value - process ID, user running the process, etc.</P> Thu, 19 Oct 2017 14:01:30 GMT https://community.splunk.com/t5/Getting-Data-In/Scripting-in-metrics-with-Splunk/m-p/317687#M59399 richgalloway 2017-10-19T14:01:30Z https://community.splunk.com/t5/Getting-Data-In/Scripting-in-metrics-with-Splunk/m-p/317688#M59400 <P>As @richgalloway said in hist comment, in 7.0.0, you can only send one <CODE>_value</CODE> and one <CODE>measurement</CODE> in each metric event, but theoretically you can have as many dimensions (columns/tags/fields) as you want.</P> <P>You could parse <CODE>top</CODE> output and send each row separately with the same timestamp. Each column would be a dimension but you would need to determine what you are sending as the <CODE>_value</CODE> field in this case. Not really sure what the point of this would be, but it is doable. </P> Thu, 19 Oct 2017 14:07:49 GMT https://community.splunk.com/t5/Getting-Data-In/Scripting-in-metrics-with-Splunk/m-p/317688#M59400 rjthibod 2017-10-19T14:07:49Z