charting the values, not the instances

[Michael]

...been surfing for this question, can't find it, although I'm sure it's been answered...

I can't figure out how to do (what I think is) a simple chart of the values in a field, not the number of times it's seen. For example, I have a simple cron.hourly script that creates a text file with a timestamp and a value (the drive space used in a given volume).

It returns the following:

Fri Nov 19 15:01:01 2010 percentage_used=42

This is parsed fine (i.e. timestamp, "percentage_used" field) but when charting it, I can't figure out how to simply chart the values over time.

To make matters more challenging is: ultimately I want to create a single chart of several of by systems' drive space over time (split by host). Doesn't seem too difficult, but I'm feeling a little short-bus on this...

Thanks in advance! Mike

[kevintelford]

If you want to just show the values you could do " | stats list(percentage_used)" or " | stats values(percentage_used)", depending on if you wanted percentage used to be deduped or not. Also, in the end something like " | timechart per_hour(percentage_used) by host" is what you'll be looking for.