https://community.splunk.com/t5/Getting-Data-In/How-to-display-latest-Linux-os-values-grouped-by-hosts/m-p/475094#M81570 <P>Like this:</P> <PRE><CODE>index="linuxos" AND CPU="all" | fields host id type tags identifiers cpu_load_percent and other metrics fields here | stats latest(*) AS * BY host </CODE></PRE> Mon, 04 Nov 2019 16:48:28 GMT woodcock 2019-11-04T16:48:28Z https://community.splunk.com/t5/Getting-Data-In/How-to-display-latest-Linux-os-values-grouped-by-hosts/m-p/475093#M81569 <P>I need to display the latest cpu, memory, etc information grouped by host in a table format. I have managed to pull cpu or memory individually or if I use stats it will only display the latest value which isn't grouped by host. My initial search which lists the CPU load by host is:</P> <PRE><CODE>host=* index="linuxos" CPU=all | dedup host | rename host as name | eval id = "urn:host:/".name , type="vm", tags=id, identifiers=id | table id type name tags identifiers cpu_load_percent </CODE></PRE> <P>I need to expand this to memory and possibly even more os related information.</P> Mon, 04 Nov 2019 14:10:09 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-display-latest-Linux-os-values-grouped-by-hosts/m-p/475093#M81569 zoveress 2019-11-04T14:10:09Z https://community.splunk.com/t5/Getting-Data-In/How-to-display-latest-Linux-os-values-grouped-by-hosts/m-p/475094#M81570 <P>Like this:</P> <PRE><CODE>index="linuxos" AND CPU="all" | fields host id type tags identifiers cpu_load_percent and other metrics fields here | stats latest(*) AS * BY host </CODE></PRE> Mon, 04 Nov 2019 16:48:28 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-display-latest-Linux-os-values-grouped-by-hosts/m-p/475094#M81570 woodcock 2019-11-04T16:48:28Z