topic Re: display field values over the chart. in Dashboards & Visualizations

display field values over the chart.

senthamilselvan — Mon, 11 Dec 2017 12:51:44 GMT

Hi Team,
I have create a dashboard for Disk utilization. I have 2 multi select option to display the server name and file systems in the servers. i have to select server name and the file system to get the file system utilization.
Our requirement is , we have one more field name called file system type(nfs3,jfs2,mmfs). when i filter the data in the dashboard, for example. I selected one server(Server A) and select one file system (FS A) and the graph will display the data utilization. I have attached dashboard sample for reference.

As i mentioned over the line(jfs2,nfs2), i have to populate the value when i select any file system from the drop down.

Please let me know for any other information.

Re: display field values over the chart.

adonio — Mon, 11 Dec 2017 14:33:34 GMT

can you share the query?
does your search / query ends with a "by" statment?
for example:
index=index sourcetype=sourcetype | timechart latest(disk) as "disk utilization(%)" by mounted on
or use the tokens from inputs as the by clause

hope it helps

Re: display field values over the chart.

senthamilselvan — Tue, 29 Sep 2020 17:13:35 GMT

Hi Adonio,

the below is my search query.
index=nix-os sourcetype=cpu | search host IN ( $selecthost$ ) cpu IN ($selectcpu$) | fields host cpu $selectfield$ | eval host_cpu="Host:"+host+"-CPU:"+cpu
| timechart span=5m avg(PercentIdleTime) as IdleTime avg(PercentSystemTime) as SystemTime avg(PercentUserTime) as UserTime avg(PercentWaitTime) as WaitTime by host_cpu

Re: display field values over the chart.

sandyIscream — Tue, 12 Dec 2017 15:16:11 GMT

Could you please try the below query:

index=nix-os sourcetype=cpu | chart span=5m avg(PercentIdleTime) as IdleTime avg(PercentSystemTime) as SystemTime avg(PercentUserTime) as UserTime avg(PercentWaitTime) as WaitTime over $host$ by $cpu$