Why can't I see the graphs related to cpu informat...

Renunaren · ‎06-12-2023

Hi Team,

We have created a splunk XML dashboard for our infra structure monitoring. Below is a snippet regarding the dashboard.

I am able to see the graphs related to cpu information, RAM information, File count, Storage Consumption information. But our colleagues are not able to see the information and below is the snippet related to the same dashboard for them.

Below is the sample XML code for this dashboard which we have used.

<row>
<panel id="chart_width">
<title></title>
<!-- Display results as a table. Uses an -->
<!-- inline search, equivalent to the <searchName> -->
<!-- specified for the other panels -->
<html>
<H1 style="text-align:center;background-color:#0080ff;">Daily Monitoring Dashboard</H1>
</html>
<html>
<style>
.dashboard-row .dashboard-panel h2.panel-title{
font-size: 20px !important;
}
#chart_width{
width:30% !important;
}
</style>
</html>
<chart>
<search>
<query>index= app_events_dwh2_de_int *(*Error*) | eval status="Error"| fields + status
| append [ search index= app_events_dwh2_de_int *(*Success*) | eval status="Success" | fields + status ]
| append [ search index= app_events_dwh2_de_int *(*Wait*) | eval status="Wait" | fields + status ]
| append [ search index= app_events_dwh2_de_int *(*Running*) | eval status="Running" | fields + status ]
| stats count by status</query>
<earliest>$Daily Monitoring Dashboard.earliest$</earliest>
<latest>$Daily Monitoring Dashboard.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.abbreviation">none</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.abbreviation">none</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.abbreviation">none</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.backgroundColor">#ffffff</option>
<option name="charting.chart">pie</option>
<option name="charting.chart.bubbleMaximumSize">100</option>
<option name="charting.chart.bubbleMinimumSize">60</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">gaps</option>
<option name="charting.chart.showDataLabels">all</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">none</option>
<option name="charting.fieldColors">{"Success": 0x009900, "Error": 0xFF0000, "Wait": 0xFF9900, "Running": 0x0047AB}</option>
<option name="charting.fontColor">black</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.mode">standard</option>
<option name="charting.legend.placement">none</option>
<option name="charting.lineWidth">2</option>
<option name="height">125</option>
<option name="refresh.display">progressbar</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">small</option>
<option name="trellis.splitBy">_aggregation</option>
</chart>
<html>
<H1 style="text-align:center;background-color:#0080ff;">Stats Table</H1>
</html>
<html>
<style>

</style>
</html>
<table>
<search>
<query>index= app_events_dwh2_de_int *(*Error*) | eval status="Error"| fields + status
| append [ search index= app_events_dwh2_de_int *(*Success*) | eval status="Success" | fields + status ]
| append [ search index= app_events_dwh2_de_int *(*Wait*) | eval status="Wait" | fields + status ]
| append [ search index= app_events_dwh2_de_int *(*Running*) | eval status="Running" | fields + status ]
| stats count by status</query>
<earliest>$Stats Table.earliest$</earliest>
<latest>$Stats Table.latest$</latest>
</search>
<option name="drilldown">none</option>
<option name="refresh.display">progressbar</option>
<format type="color" field="status">
<colorPalette type="map">{"Success":#FFFFFF,"Running":#FFFFFF,"Wait":#FFFFFF,"Error":#FFFFFF}</colorPalette>
</format>
<format type="number" field="status"></format>
<format type="color" field="count">
<colorPalette type="minMidMax" maxColor="#FFFFFF" minColor="#FFFFFF"></colorPalette>
<scale type="minMidMax"></scale>
</format>
</table>
</panel>
<panel id="CPU_Information">
<html>
<H1 style="text-align:center;background-color:#0080ff;">CPU Information (In Percentage)</H1>
</html>
<html>
<style>
#CPU_Information{
height: 25px;
}
#CPU_Information{
width:35% !important;
}
</style>
</html>
<chart>
<search>
<query>index="app_events_dwh2_de_int" _raw=*cpu* | rex ": %utilization\",.+:\"(?&lt;CPU_Utilization&gt;[\d\.]+)" | rex max_match=0 ":\\\\\"(?&lt;TIME&gt;\d\d:\d\d:\d\d)" | chart Values(CPU_Utilization) over TIME</query>
<earliest>$Infra Time Select.earliest$</earliest>
<latest>$Infra Time Select.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">-45</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.abbreviation">none</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.abbreviation">none</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.abbreviation">none</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.backgroundColor">#FFFFFF</option>
<option name="charting.chart">line</option>
<option name="charting.chart.bubbleMaximumSize">50</option>
<option name="charting.chart.bubbleMinimumSize">10</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">gaps</option>
<option name="charting.chart.showDataLabels">none</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">none</option>
<option name="charting.fontColor">#000000</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.mode">standard</option>
<option name="charting.legend.placement">right</option>
<option name="charting.lineWidth">2</option>
<option name="height">125</option>
<option name="refresh.display">progressbar</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
</chart>
<html>
<H1 style="text-align:center;background-color:#0080ff;">RAM Information (in KB)</H1>
</html>
<chart>
<search>
<query>index="app_events_dwh2_de_int" _raw=*kbswpused* | rex max_match=0 "\\\\\\\\\\\\\"kbswpused\\\\\\\\\\\\\":\d*\\\\\\\\\\\\\"(?&lt;Swap_used&gt;[^\\\]+)" | rex max_match=0 ":\\\\\"(?&lt;TIME&gt;\d\d:\d\d:\d\d)" | eval Swap_Used(GB)=round(Swap_Used/1024/1024,3) | chart Values(Swap_Used(GB)) over TIME</query>
<earliest>$Infra Time Select.earliest$</earliest>
<latest>$Infra Time Select.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">-45</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.abbreviation">none</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.abbreviation">none</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.abbreviation">none</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.backgroundColor">#FFFFFF</option>
<option name="charting.chart">line</option>
<option name="charting.chart.bubbleMaximumSize">50</option>
<option name="charting.chart.bubbleMinimumSize">10</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">connect</option>
<option name="charting.chart.showDataLabels">none</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">stacked</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">none</option>
<option name="charting.fieldColors">{"Success": 0x009900, "Error": 0xFF0000, "Wait": 0xFF9900, "Running": 0x0047AB}</option>
<option name="charting.fontColor">#000000</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.mode">standard</option>
<option name="charting.legend.placement">right</option>
<option name="charting.lineWidth">2</option>
<option name="height">231</option>
<option name="refresh.display">progressbar</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
</chart>
</panel>
<panel id="File_Information">
<html>
<H1 style="text-align:center;background-color:#0080ff;">FILE Count(in thousands)</H1>
<style>
#File_Information{
height:25px !important;
}
#File_Information{
width:35% !important;
}
</style>
</html>
<chart>
<search>
<query>index="app_events_dwh2_de_int" _raw=*File_count* | rex max_match=0 "\\\\\\\\\\\\\"File_count\\\\\\\\\\\\\":d*\\\\\\\\\\\\\"(?&lt;File_Count&gt;[^\\\]+)" | stats latest(File_Count) as File_Count | chart Values(File_Count)</query>
<earliest>$FileCount and Storage.earliest$</earliest>
<latest>$FileCount and Storage.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.abbreviation">none</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.abbreviation">none</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.abbreviation">none</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.backgroundColor">#ffffff</option>
<option name="charting.chart">fillerGauge</option>
<option name="charting.chart.bubbleMaximumSize">50</option>
<option name="charting.chart.bubbleMinimumSize">10</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">gaps</option>
<option name="charting.chart.showDataLabels">all</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.fieldColors">{"Success": 0x009900, "Error": 0xFF0000, "Wait": 0xFF9900, "Running": 0x0047AB}</option>
<option name="charting.fontColor">black</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.mode">standard</option>
<option name="charting.legend.placement">right</option>
<option name="charting.lineWidth">2</option>
<option name="height">145</option>
<option name="refresh.display">progressbar</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">small</option>
<option name="trellis.splitBy">_aggregation</option>
</chart>
<html>
<H1 style="text-align:center;background-color:#0080ff;">Storage Consumption (in GB)</H1>
</html>
<chart>
<search>
<query>index="app_events_dwh2_de_int" _raw=*File_Count* | rex max_match=0 "\\\\\\\\\\\\\"CONTENT_SIZE\\\\\\\\\\\\\":\d*\\\\\\\\\\\\\"(?&lt;Storage&gt;[^\\\]+)" | stats latest(Storage) as Storage | chart Values(Storage)</query>
<earliest>$FileCount and Storage.earliest$</earliest>
<latest>$FileCount and Storage.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">-45</option>
<option name="charting.axisTitleX.visibility">visible</option>
<option name="charting.axisTitleY.visibility">visible</option>
<option name="charting.axisTitleY2.visibility">visible</option>
<option name="charting.axisX.abbreviation">none</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.abbreviation">none</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY2.abbreviation">none</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.backgroundColor">#FFFFFF</option>
<option name="charting.chart">radialGauge</option>
<option name="charting.chart.bubbleMaximumSize">50</option>
<option name="charting.chart.bubbleMinimumSize">10</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">gaps</option>
<option name="charting.chart.showDataLabels">none</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">stacked</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.fieldColors">{"Success": 0x009900, "Error": 0xFF0000, "Wait": 0xFF9900, "Running": 0x0047AB}</option>
<option name="charting.fontColor">#000000</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.mode">standard</option>
<option name="charting.legend.placement">right</option>
<option name="charting.lineWidth">2</option>
<option name="height">253</option>
<option name="refresh.display">progressbar</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
</chart>
</panel>
</row>

I request you to kindly look into this and do the needful.

Why can't I see the graphs related to cpu information, RAM information, file count, storage consumption information?

dashboard

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

Splunk Observability for AI

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

Are you a member of the Splunk Community?

Why can't I see the graphs related to cpu information, RAM information, file count, storage consumption information?

dashboard

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

Splunk Observability for AI

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler