Dashboards & Visualizations

How to create a graph showing multiple metrics for a server, and have the graph change color based on the stats?

banderson7
Communicator

I'm attempting to build a status dashboard for my prod server farm, and would like to have colored graphics representing the status of a server based on certain criteria (Percentage remaining free disk space, CPU percentage free, memory percentage free, etc) and if all of those stats are green, make the server graphic green. If one of those stats isn't green change the color on the server graphic. Also, allow the server graphic be able to drill down to the stats listed.
I've attempted to use the rangemap command, but haven't gotten very far. For instance, running the following search:

index=os sourcetype=df host=ttappalf03 "/dev/mapper/system-opt" |dedup filesystem|rangemap field=PercentFreeSpace low=0-30 elevated=31-69 high=70-100 default=severe

shows the "df" line, but doesn't single out the PercrentFreeSpace field. What am I doing wrong here?
Thanks

0 Karma
1 Solution

NOUMSSI
Builder

Hi
you must use functions that produce a statistical table with numerical values ​​and then apply the rangemap order on the corresponding field.
I guess you have a PercentFreeSpace field that contains numeric values ​​, if not using the eval command with the corresponding formula for creating this field with its values
You can do this for example:

index=os sourcetype=df host=ttappalf03 "/dev/mapper/system-opt" |dedup filesystem|table filesystem PercentFreeSpace |rangemap field=PercentFreeSpace low=0-30 elevated=31-69 high=70-100 default=severe

View solution in original post

NOUMSSI
Builder

Hi
you must use functions that produce a statistical table with numerical values ​​and then apply the rangemap order on the corresponding field.
I guess you have a PercentFreeSpace field that contains numeric values ​​, if not using the eval command with the corresponding formula for creating this field with its values
You can do this for example:

index=os sourcetype=df host=ttappalf03 "/dev/mapper/system-opt" |dedup filesystem|table filesystem PercentFreeSpace |rangemap field=PercentFreeSpace low=0-30 elevated=31-69 high=70-100 default=severe

NOUMSSI
Builder

Don't forget to vote me

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...