Dashboards & Visualizations

display field values over the chart.

senthamilselvan
Engager

Hi Team,
I have create a dashboard for Disk utilization. I have 2 multi select option to display the server name and file systems in the servers. i have to select server name and the file system to get the file system utilization.
Our requirement is , we have one more field name called file system type(nfs3,jfs2,mmfs). when i filter the data in the dashboard, for example. I selected one server(Server A) and select one file system (FS A) and the graph will display the data utilization. I have attached dashboard sample for reference.alt text

As i mentioned over the line(jfs2,nfs2), i have to populate the value when i select any file system from the drop down.

Please let me know for any other information.

Tags (1)
0 Karma

sandyIscream
Communicator

Could you please try the below query:

index=nix-os sourcetype=cpu | chart span=5m avg(PercentIdleTime) as IdleTime avg(PercentSystemTime) as SystemTime avg(PercentUserTime) as UserTime avg(PercentWaitTime) as WaitTime over $host$ by $cpu$

0 Karma

adonio
Ultra Champion

can you share the query?
does your search / query ends with a "by" statment?
for example:
index=index sourcetype=sourcetype | timechart latest(disk) as "disk utilization(%)" by mounted on
or use the tokens from inputs as the by clause

hope it helps

0 Karma

senthamilselvan
Engager

Hi Adonio,

the below is my search query.
index=nix-os sourcetype=cpu | search host IN ( $selecthost$ ) cpu IN ($selectcpu$) | fields host cpu $selectfield$ | eval host_cpu="Host:"+host+"-CPU:"+cpu
| timechart span=5m avg(PercentIdleTime) as IdleTime avg(PercentSystemTime) as SystemTime avg(PercentUserTime) as UserTime avg(PercentWaitTime) as WaitTime by host_cpu

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...