<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to integrate separate graphs into one board in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-integrate-separate-graphs-into-one-board/m-p/39288#M8959</link>
    <description>&lt;P&gt;Super. Besten Dank.&lt;/P&gt;</description>
    <pubDate>Fri, 22 Feb 2013 09:12:50 GMT</pubDate>
    <dc:creator>lemikg</dc:creator>
    <dc:date>2013-02-22T09:12:50Z</dc:date>
    <item>
      <title>How to integrate separate graphs into one board</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-integrate-separate-graphs-into-one-board/m-p/39286#M8957</link>
      <description>&lt;P&gt;Hi Splunkers&lt;/P&gt;

&lt;P&gt;I have two searches I want to compare, but unfortunately can't find my way around it.&lt;/P&gt;

&lt;P&gt;First is: &lt;STRONG&gt;CPU load by host&lt;/STRONG&gt;&lt;BR /&gt;
&lt;PRE&gt;&lt;CODE&gt;index=os sourcetype=cpu host="$selectedHost$"| multikv fields pctIdle  | eval Percent_CPU_Load = 100 - pctIdle  | timechart avg(Percent_CPU_Load) by host&lt;/CODE&gt;&lt;/PRE&gt;&lt;/P&gt;

&lt;P&gt;and second: &lt;STRONG&gt;System load by host&lt;/STRONG&gt;&lt;BR /&gt;
&lt;PRE&gt;&lt;CODE&gt;index=os sourcetype=vmstat host="$selectedHost$" | multikv fields loadAvg1mi | timechart avg(loadAvg1mi) by host | sort _time&lt;/CODE&gt;&lt;/PRE&gt;&lt;/P&gt;

&lt;P&gt;Can anyone help me here or point me at the right direction?&lt;/P&gt;

&lt;P&gt;Thanks in advance&lt;/P&gt;

&lt;P&gt;best regards&lt;/P&gt;

&lt;P&gt;Mike&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 13:22:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-integrate-separate-graphs-into-one-board/m-p/39286#M8957</guid>
      <dc:creator>lemikg</dc:creator>
      <dc:date>2020-09-28T13:22:05Z</dc:date>
    </item>
    <item>
      <title>Re: How to integrate separate graphs into one board</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-integrate-separate-graphs-into-one-board/m-p/39287#M8958</link>
      <description>&lt;P&gt;Assuming the time ranges, bucket sizes, and order is the same  you can merge those two using appendcols... alternatively, join them by time. You'll just have to take care of the field names, both likely have the same set.&lt;/P&gt;</description>
      <pubDate>Thu, 21 Feb 2013 22:53:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-integrate-separate-graphs-into-one-board/m-p/39287#M8958</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2013-02-21T22:53:12Z</dc:date>
    </item>
    <item>
      <title>Re: How to integrate separate graphs into one board</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-integrate-separate-graphs-into-one-board/m-p/39288#M8959</link>
      <description>&lt;P&gt;Super. Besten Dank.&lt;/P&gt;</description>
      <pubDate>Fri, 22 Feb 2013 09:12:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-integrate-separate-graphs-into-one-board/m-p/39288#M8959</guid>
      <dc:creator>lemikg</dc:creator>
      <dc:date>2013-02-22T09:12:50Z</dc:date>
    </item>
  </channel>
</rss>

