<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Help me with splunk query to monitor CPU and Memory utilized by splunk adhoc and alert searches in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Help-me-with-splunk-query-to-monitor-CPU-and-Memory-utilized-by/m-p/754383#M242856</link>
    <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/309475"&gt;@cogh3o&lt;/a&gt;&amp;nbsp;As you are new to this forum, you may not know that "Splunk" is not a purpose made application. &amp;nbsp;No one here knows what your data looks like. &amp;nbsp;To ask an answerable question, follow these golden rules; nay, call them the four commandments:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Illustrate data input (in raw text, anonymize as needed), whether they are raw events or output from a search (SPL that volunteers here do not have to look at).&lt;/LI&gt;&lt;LI&gt;Illustrate the desired output from illustrated data.&lt;/LI&gt;&lt;LI&gt;Explain the logic between illustrated data and desired output&amp;nbsp;&lt;EM&gt;without&lt;/EM&gt;&amp;nbsp;SPL.&lt;/LI&gt;&lt;LI&gt;If you also illustrate attempted SPL, illustrate actual output and compare with desired output, explain why they look different&amp;nbsp;&lt;U&gt;to you&lt;/U&gt;&amp;nbsp;if that is not painfully obvious.&lt;/LI&gt;&lt;/UL&gt;</description>
    <pubDate>Thu, 16 Oct 2025 05:29:12 GMT</pubDate>
    <dc:creator>yuanliu</dc:creator>
    <dc:date>2025-10-16T05:29:12Z</dc:date>
    <item>
      <title>Help me with splunk query to monitor CPU and Memory utilized by splunk adhoc and alert searches</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Help-me-with-splunk-query-to-monitor-CPU-and-Memory-utilized-by/m-p/747342#M241801</link>
      <description>&lt;P&gt;Help me with splunk query to monitor CPU and Memory utilized by splunk adhoc and alert searches&lt;/P&gt;</description>
      <pubDate>Mon, 02 Jun 2025 11:45:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Help-me-with-splunk-query-to-monitor-CPU-and-Memory-utilized-by/m-p/747342#M241801</guid>
      <dc:creator>cogh3o</dc:creator>
      <dc:date>2025-06-02T11:45:21Z</dc:date>
    </item>
    <item>
      <title>Re: Help me with splunk query to monitor CPU and Memory utilized by splunk adhoc and alert searches</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Help-me-with-splunk-query-to-monitor-CPU-and-Memory-utilized-by/m-p/754338#M242854</link>
      <description>&lt;P&gt;Are you looking for general metrics/usage or metrics per search/alert ?&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 15 Oct 2025 08:15:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Help-me-with-splunk-query-to-monitor-CPU-and-Memory-utilized-by/m-p/754338#M242854</guid>
      <dc:creator>akkoem</dc:creator>
      <dc:date>2025-10-15T08:15:12Z</dc:date>
    </item>
    <item>
      <title>Re: Help me with splunk query to monitor CPU and Memory utilized by splunk adhoc and alert searches</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Help-me-with-splunk-query-to-monitor-CPU-and-Memory-utilized-by/m-p/754383#M242856</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/309475"&gt;@cogh3o&lt;/a&gt;&amp;nbsp;As you are new to this forum, you may not know that "Splunk" is not a purpose made application. &amp;nbsp;No one here knows what your data looks like. &amp;nbsp;To ask an answerable question, follow these golden rules; nay, call them the four commandments:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Illustrate data input (in raw text, anonymize as needed), whether they are raw events or output from a search (SPL that volunteers here do not have to look at).&lt;/LI&gt;&lt;LI&gt;Illustrate the desired output from illustrated data.&lt;/LI&gt;&lt;LI&gt;Explain the logic between illustrated data and desired output&amp;nbsp;&lt;EM&gt;without&lt;/EM&gt;&amp;nbsp;SPL.&lt;/LI&gt;&lt;LI&gt;If you also illustrate attempted SPL, illustrate actual output and compare with desired output, explain why they look different&amp;nbsp;&lt;U&gt;to you&lt;/U&gt;&amp;nbsp;if that is not painfully obvious.&lt;/LI&gt;&lt;/UL&gt;</description>
      <pubDate>Thu, 16 Oct 2025 05:29:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Help-me-with-splunk-query-to-monitor-CPU-and-Memory-utilized-by/m-p/754383#M242856</guid>
      <dc:creator>yuanliu</dc:creator>
      <dc:date>2025-10-16T05:29:12Z</dc:date>
    </item>
  </channel>
</rss>

