topic Measure throughput (eps, kbps) per Input in Dashboards & Visualizations

Measure throughput (eps, kbps) per Input

JensT — Thu, 01 Jul 2010 21:19:30 GMT

We would like to measure the performance and throughput. I would like to have line-graphs that shows:

Thanks,

Jens

Jeremiah — Thu, 01 Jul 2010 22:11:39 GMT

If you're running the latest version, some of that info is on the Index Activity dashboard, and you can use that search as a start.

By input, are you referring to source, sourcetype, or host?

kbps by sourcetype: index="_internal" (source=/metrics.log OR source=\metrics.log) group="per_sourcetype_thruput" | timechart avg(kbps) by series

eps by sourcetype: index="_internal" (source=/metrics.log OR source=\metrics.log) group="per_sourcetype_thruput" | timechart avg(eps) by series

If you wanted host or source, use group="per_source_thruput" or group="per_host_thruput" instead.

Lowell — Thu, 01 Jul 2010 22:49:25 GMT

You can just do source=*metrics.log

Genti — Thu, 01 Jul 2010 23:42:31 GMT

and if you want more data you can use source=metrics.log
This will include metrics.log.1-5

JensT — Mon, 05 Jul 2010 14:19:15 GMT

Hello Jeremiah,

seems like i have to enable something, because your searches return nothing.

I am using Splunk 4.1.2

Cheers,

Jens