Archive
Highlighted

Converting events data into metric using Mcollect

Explorer

Hi Guys,

I'm trying to convert events data into metric for CPU, Disk, Memory monitoring for Azure PAAS, using below command.
index=azuredata metricname=cpupercent
| eval metric
name=case(metricname="cpupercent", "%ProcessorTime")| eval value=maximum
| fields host,metric
name,namespace,time,value
| eval prefix="Processor." | mcollect index=azuremetricssummary prefix_field=prefix

*here I'm trying to use mcollect to send CPU data to summary index "azuremetricssummary ". Query is running with no error but not showing _value field in the output and when I'm running below command to search metrics data , Not seeing any output.

| mstats avg(value) count where metricname="Processor.%ProcessorTime" index=azuremetricssummary by host

Tags (1)
0 Karma
Highlighted

Re: Converting events data into metric using Mcollect

SplunkTrust
SplunkTrust

Did you try using the metric explorer or analytics workspace to see if you can find the said metrics?

0 Karma