topic Sum last count over servers and time chart in Dashboards & Visualizations

Sum last count over servers and time chart

n0cturne — Fri, 02 Jul 2021 09:31:04 GMT

Hello,

I have 5 Servers. Every server has an actual count of user sessions. I want them to sum up, without loosing the trend funcion in the single value chart.

This is my actual query:

index=ascrm sourcetype=jmx NumUiSessions=* host IN (z1il0095*,z1il0096*,z1il0097*,z1il0098*) | stats latest(NumUiSessions) as latest_NumUiSessions by host | stats sum(latest_NumUiSessions) AS UISessions

Could anyone give me a clou?

Best regards

Benjamin

Re: Sum last count over servers and time chart

ITWhisperer — Fri, 02 Jul 2021 09:40:02 GMT

What are you trending against, because you currently only have one value remaining?

Re: Sum last count over servers and time chart

n0cturne — Fri, 02 Jul 2021 10:27:15 GMT

I want to trend against the value x hours ago. I have a time picker with token. This time token shoul be used to define x.

Re: Sum last count over servers and time chart

ITWhisperer — Fri, 02 Jul 2021 10:37:33 GMT

Something like this?

index=ascrm sourcetype=jmx NumUiSessions=* host IN (z1il0095*,z1il0096*,z1il0097*,z1il0098*) | bin _time span=1h | stats latest(NumUiSessions) as latest_NumUiSessions by host _time | streamstats sum(latest_NumUiSessions) AS UISessions by _time