https://community.splunk.com/t5/Splunk-Search/Mstats-and-timechart-spl-for-metric-by-host/m-p/400253#M195752 <P>I was looking to graph out all of our ‘free space’ on a single timechart but am struggling with the syntax. Each line should represent the free space remaining on each host. <BR /> The Mstats command is new to me</P> <P>| mstats avg(_value) WHERE index=windows_os_metrics AND metric_name="% Free Space" span=30m by host <BR /> | timechart span=30m avg(avg_value) by host</P> <P>We have the data in the metrics index but we cannot get the spl to graph.</P> Wed, 30 Sep 2020 01:24:49 GMT nathanluke86 2020-09-30T01:24:49Z https://community.splunk.com/t5/Splunk-Search/Mstats-and-timechart-spl-for-metric-by-host/m-p/400253#M195752 <P>I was looking to graph out all of our ‘free space’ on a single timechart but am struggling with the syntax. Each line should represent the free space remaining on each host. <BR /> The Mstats command is new to me</P> <P>| mstats avg(_value) WHERE index=windows_os_metrics AND metric_name="% Free Space" span=30m by host <BR /> | timechart span=30m avg(avg_value) by host</P> <P>We have the data in the metrics index but we cannot get the spl to graph.</P> Wed, 30 Sep 2020 01:24:49 GMT https://community.splunk.com/t5/Splunk-Search/Mstats-and-timechart-spl-for-metric-by-host/m-p/400253#M195752 nathanluke86 2020-09-30T01:24:49Z