display field values over the chart.

[senthamilselvan]

Hi Team,
I have create a dashboard for Disk utilization. I have 2 multi select option to display the server name and file systems in the servers. i have to select server name and the file system to get the file system utilization.
Our requirement is , we have one more field name called file system type(nfs3,jfs2,mmfs). when i filter the data in the dashboard, for example. I selected one server(Server A) and select one file system (FS A) and the graph will display the data utilization. I have attached dashboard sample for reference.

As i mentioned over the line(jfs2,nfs2), i have to populate the value when i select any file system from the drop down.

Please let me know for any other information.

[sandyIscream]

Could you please try the below query:

index=nix-os sourcetype=cpu | chart span=5m avg(PercentIdleTime) as IdleTime avg(PercentSystemTime) as SystemTime avg(PercentUserTime) as UserTime avg(PercentWaitTime) as WaitTime over $host$ by $cpu$

[adonio]

can you share the query?
does your search / query ends with a "by" statment?
for example:
index=index sourcetype=sourcetype | timechart latest(disk) as "disk utilization(%)" by mounted on
or use the tokens from inputs as the by clause

hope it helps

[senthamilselvan]

Hi Adonio,

the below is my search query.
index=nix-os sourcetype=cpu | search host IN ( $selecthost$ ) cpu IN ($selectcpu$) | fields host cpu $selectfield$ | eval host_cpu="Host:"+host+"-CPU:"+cpu
| timechart span=5m avg(PercentIdleTime) as IdleTime avg(PercentSystemTime) as SystemTime avg(PercentUserTime) as UserTime avg(PercentWaitTime) as WaitTime by host_cpu