<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Metrics average in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Metrics-average/m-p/660221#M227903</link>
    <description>&lt;P&gt;Hi,&lt;BR /&gt;&lt;BR /&gt;I am new to splunk metrics search. I am AWS/EBS metrics to splunk.&amp;nbsp;I want to calculate the average throughput and number of IOPS for my Amazon Elastic Block Store (Amazon EBS) volume. I found solutions the solution in AWS:&amp;nbsp;&lt;A href="https://repost.aws/knowledge-center/ebs-cloudwatch-metrics-throughput-iops," target="_blank" rel="noopener"&gt;https://repost.aws/knowledge-center/ebs-cloudwatch-metrics-throughput-iops,&lt;/A&gt;&amp;nbsp;I don't know how to search it in Splunk.&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;This is the max I can do atm&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| mpreview index=my-index | search namespace="AWS/EBS" metricName=VolumeReadOps&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;Really appreciate, if someone help me out,&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 10 Oct 2023 09:33:21 GMT</pubDate>
    <dc:creator>alakdam</dc:creator>
    <dc:date>2023-10-10T09:33:21Z</dc:date>
    <item>
      <title>Metrics average</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Metrics-average/m-p/660221#M227903</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;&lt;BR /&gt;I am new to splunk metrics search. I am AWS/EBS metrics to splunk.&amp;nbsp;I want to calculate the average throughput and number of IOPS for my Amazon Elastic Block Store (Amazon EBS) volume. I found solutions the solution in AWS:&amp;nbsp;&lt;A href="https://repost.aws/knowledge-center/ebs-cloudwatch-metrics-throughput-iops," target="_blank" rel="noopener"&gt;https://repost.aws/knowledge-center/ebs-cloudwatch-metrics-throughput-iops,&lt;/A&gt;&amp;nbsp;I don't know how to search it in Splunk.&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;This is the max I can do atm&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| mpreview index=my-index | search namespace="AWS/EBS" metricName=VolumeReadOps&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;Really appreciate, if someone help me out,&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 10 Oct 2023 09:33:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Metrics-average/m-p/660221#M227903</guid>
      <dc:creator>alakdam</dc:creator>
      <dc:date>2023-10-10T09:33:21Z</dc:date>
    </item>
    <item>
      <title>Re: Metrics average</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Metrics-average/m-p/660328#M227939</link>
      <description>&lt;P&gt;I assume that my-index is a metrics index. &amp;nbsp;But still unclear what is being asked. &amp;nbsp;Generally only you will know what data you get back from AWS/EBS and which metrics are of interest to your use case. &amp;nbsp; Once you know which metrics you are interested in and what kind of stats (e.g., avg) you want to perform, &lt;A href="https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Mstats" target="_blank" rel="noopener"&gt;mstats&lt;/A&gt; is your friend.&lt;/P&gt;&lt;P&gt;If you have difficulty figure out which metrics are available, mstats is also your friend:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| mstats count(*) as * where index=my-index ``` my-index must be a metric index ```
| transpose column_name=metric_name&lt;/LI-CODE&gt;&lt;P&gt;Hope this helps.&lt;/P&gt;</description>
      <pubDate>Wed, 11 Oct 2023 00:26:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Metrics-average/m-p/660328#M227939</guid>
      <dc:creator>yuanliu</dc:creator>
      <dc:date>2023-10-11T00:26:04Z</dc:date>
    </item>
  </channel>
</rss>

