Dashboards & Visualizations

how to use base search on SIM FLOW or SIM Query ?

silverKi
Loves-to-Learn Lots

f
this is my current quey...
<I am currently sending metric-data to O11y and receiving data through the splunk sim command. What I'm curious about is that I want to optimize my current query using base-search. Is this possible?>

| sim flow query="A = data('sap.hana.connection.count', rollup='latest').sum(by=['CONNECTION_STATUS']).publish(label='A')" resolution=10
| tail 20
| stats avg(_value) as avg_val by _time, CONNECTION_STATUS
<row>
<panel id="connections">
<html depends="$hiddenForCSS$">
<style>
#connections{
width: 15% !important;
}
</style>
</html>
<single>
<title>Connections</title>
<search>
<query>| sim flow query="A = data('sap.hana.connection.count', rollup='latest').sum().publish(label='A')"
| stats sum(_value) as host_sum by _time</query>
<earliest>$global_time.earliest$</earliest>
<latest>$global_time.latest$</latest>
<sampleRatio>1</sampleRatio>
<refresh>$time_set$</refresh>
<refreshType>delay</refreshType>
</search>
<option name="colorBy">value</option>
<option name="colorMode">none</option>
<option name="drilldown">none</option>
<option name="height">151</option>
<option name="numberPrecision">0</option>
<option name="rangeColors">["0x555","0x118832","0x1182f3","0xf1813f","0xdc4e41"]</option>
<option name="rangeValues">[0,30,50,70]</option>
<option name="refresh.display">progressbar</option>
<option name="showSparkline">0</option>
<option name="showTrendIndicator">0</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
<option name="trendColorInterpretation">standard</option>
<option name="trendDisplayMode">absolute</option>
<option name="unitPosition">after</option>
<option name="useColors">1</option>
<option name="useThousandSeparators">1</option>
</single>
</panel>
<panel id="Con_state">
<html depends="$hiddenForCSS$">
<style>
#Con_state{
width: 34% !important;
}
</style>
</html>
<single>
<title>Connections by state</title>
<search>
<query>| sim flow query="A = data('sap.hana.connection.count', rollup='latest').sum(by=['CONNECTION_STATUS']).publish(label='A')" resolution=10
| tail 20
| stats avg(_value) as avg_val by _time, CONNECTION_STATUS</query>
<earliest>$global_time.earliest$</earliest>
<latest>$global_time.latest$</latest>
<sampleRatio>1</sampleRatio>
<refresh>$time_set$</refresh>
<refreshType>delay</refreshType>
</search>
<option name="colorMode">none</option>
<option name="drilldown">none</option>
<option name="height">174</option>
<option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
<option name="refresh.display">progressbar</option>
<option name="trellis.enabled">1</option>
<option name="trellis.scales.shared">0</option>
<option name="trellis.size">medium</option>
<option name="useColors">1</option>
</single>
</panel></row>

 


 

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...