All Apps and Add-ons

mstats - convert spl from perfmon (is it possible)

nathanluke86
Communicator

Is it possible to change current dashboards for metrics using perfmon to metrics (mstats)

Example: cpu greater than 50% over 24h

eventtype=perfmon_windows earliest_time=-1d object=Processor counter="% Processor Time" host="$HostMonitoringHost$" | sort -Value | dedup host | eval Value=round(Value) | where Value>50 | rangemap field=Value "50 - 60%"=50-59 "60 - 80%"=60-79 "> 80%"=80-100 | chart count(host), list(host) by range

Finding the metrics indexing a bit frustrating as it limits the use of apps like windows infrastructure which seem to add value.

Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...