Format of Splunk_TA_nix cpu.sh

[deepak02]

Hi,

I have installed the add on Splunk_TA_nix.

I have attached the output I am seeing on Splunk from the add on.

Can you please explain the format? What do each of the fields mean?

Thanks,
Deepak

[woodcock · Accepted solution]

The CPU field is the CPU core, pctUser is the fraction of time the core spent handling commands given by actual users (not system processes/dameons), pctNice is the fractionof time the core spent being "nice" (yielding a running process for a higher priority process), pctSystem is the fraction of time the core spent handling non-user (system) commands, pctIowait is the fraction of time the core spent waiting for disk or port I/O, pctIdleis the fraction of time the core spent waiting for something to do.

[deepak02]

Thankyou.

Is fraction of time = percentage?

If pctUser is 1.76, does it mean that the core spent 1.76% of the time handling commands by users?

[woodcock]

Yes, every row should add up (roughly) to 100%.