All Apps and Add-ons

Splunk for K8s - typo in savedsearches "Pod CPU/Memeory Usage Trend"

guilmxm
Influencer

Hello,

Currently reviewing the new Splunk addon for Kubernetes, I noticed a typo in the name of the following saved search:

" Pod CPU/Memeory Usage Trend"

[Pod CPU/Memeory Usage Trend]
search = | mstats avg(_value) as cpu  WHERE `k8s-metrics-index` AND metric_name="kube.pod.cpu.usage" span=10s  BY "pod" | join type=left _time [ | mstats avg(_value) as memory WHERE `k8s-metrics-index` AND metric_name="kube.pod.memory.usage" BY span=10s "pod"] | stats sparkline(avg(cpu)) as "CPU Usage", sparkline(avg(memory)) as "Memory Usage" BY "pod"

KInd regards,

Guilhem

0 Karma
1 Solution

mattymo
Splunk Employee
Splunk Employee

Thanks Guilmxm,

Unfortunately, I noticed a few typos.

Will update for next release. Will keep ya posted!

Matt

- MattyMo

View solution in original post

0 Karma

anywhere99
Explorer

| mstats avg(_value) as cpu WHERE `k8s-metrics-index` AND metric_name="kube.pod.cpu.usage_rate" span=10s BY "pod-name" | join type=left _time [ | mstats avg(_value) as memory WHERE `k8s-metrics-index` AND metric_name="kube.pod.memory.usage_bytes" BY span=10s "pod-name"] | stats sparkline(avg(cpu)) as "CPU Usage", sparkline(avg(memory)) as "Memory Usage" BY "pod-name"

0 Karma

mattymo
Splunk Employee
Splunk Employee

Thanks Guilmxm,

Unfortunately, I noticed a few typos.

Will update for next release. Will keep ya posted!

Matt

- MattyMo
0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...