https://community.splunk.com/t5/Splunk-Search/Converting-events-data-into-metric-using-Mcollect/m-p/483765#M193367 <P>Did you try using the metric explorer or analytics workspace to see if you can find the said metrics?</P> Wed, 29 Apr 2020 04:36:01 GMT gjanders 2020-04-29T04:36:01Z https://community.splunk.com/t5/Splunk-Search/Converting-events-data-into-metric-using-Mcollect/m-p/483764#M193366 <P>Hi Guys,</P> <P>I'm trying to convert events data into metric for CPU, Disk, Memory monitoring for Azure PAAS, using below command.<BR /> index=azure_data metric_name=cpu_percent <BR /> | eval metric_name=case(metric_name="cpu_percent", "%_Processor_Time")| eval _value=maximum<BR /> | fields host,metric_name,namespace,_time,_value<BR /> | eval prefix="Processor." | mcollect index=azure_metrics_summary prefix_field=prefix</P> <P>*here I'm trying to use mcollect to send CPU data to summary index "azure_metrics_summary ". Query is running with no error but not showing _value field in the output and when I'm running below command to search metrics data , Not seeing any output.</P> <P>| mstats avg(_value) count where metric_name="Processor.%_Processor_Time" index=azure_metrics_summary by host</P> Wed, 30 Sep 2020 05:09:24 GMT https://community.splunk.com/t5/Splunk-Search/Converting-events-data-into-metric-using-Mcollect/m-p/483764#M193366 ssharma09 2020-09-30T05:09:24Z https://community.splunk.com/t5/Splunk-Search/Converting-events-data-into-metric-using-Mcollect/m-p/483765#M193367 <P>Did you try using the metric explorer or analytics workspace to see if you can find the said metrics?</P> Wed, 29 Apr 2020 04:36:01 GMT https://community.splunk.com/t5/Splunk-Search/Converting-events-data-into-metric-using-Mcollect/m-p/483765#M193367 gjanders 2020-04-29T04:36:01Z