f
this is my current quey...
<I am currently sending metric-data to O11y and receiving data through the splunk sim command. What I'm curious about is that I want to optimize my current query using base-search. Is this possible?>
| sim flow query="A = data('sap.hana.connection.count', rollup='latest').sum(by=['CONNECTION_STATUS']).publish(label='A')" resolution=10
| tail 20
| stats avg(_value) as avg_val by _time, CONNECTION_STATUS<row>
<panel id="connections">
<html depends="$hiddenForCSS$">
<style>
#connections{
width: 15% !important;
}
</style>
</html>
<single>
<title>Connections</title>
<search>
<query>| sim flow query="A = data('sap.hana.connection.count', rollup='latest').sum().publish(label='A')"
| stats sum(_value) as host_sum by _time</query>
<earliest>$global_time.earliest$</earliest>
<latest>$global_time.latest$</latest>
<sampleRatio>1</sampleRatio>
<refresh>$time_set$</refresh>
<refreshType>delay</refreshType>
</search>
<option name="colorBy">value</option>
<option name="colorMode">none</option>
<option name="drilldown">none</option>
<option name="height">151</option>
<option name="numberPrecision">0</option>
<option name="rangeColors">["0x555","0x118832","0x1182f3","0xf1813f","0xdc4e41"]</option>
<option name="rangeValues">[0,30,50,70]</option>
<option name="refresh.display">progressbar</option>
<option name="showSparkline">0</option>
<option name="showTrendIndicator">0</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
<option name="trendColorInterpretation">standard</option>
<option name="trendDisplayMode">absolute</option>
<option name="unitPosition">after</option>
<option name="useColors">1</option>
<option name="useThousandSeparators">1</option>
</single>
</panel>
<panel id="Con_state">
<html depends="$hiddenForCSS$">
<style>
#Con_state{
width: 34% !important;
}
</style>
</html>
<single>
<title>Connections by state</title>
<search>
<query>| sim flow query="A = data('sap.hana.connection.count', rollup='latest').sum(by=['CONNECTION_STATUS']).publish(label='A')" resolution=10
| tail 20
| stats avg(_value) as avg_val by _time, CONNECTION_STATUS</query>
<earliest>$global_time.earliest$</earliest>
<latest>$global_time.latest$</latest>
<sampleRatio>1</sampleRatio>
<refresh>$time_set$</refresh>
<refreshType>delay</refreshType>
</search>
<option name="colorMode">none</option>
<option name="drilldown">none</option>
<option name="height">174</option>
<option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option>
<option name="refresh.display">progressbar</option>
<option name="trellis.enabled">1</option>
<option name="trellis.scales.shared">0</option>
<option name="trellis.size">medium</option>
<option name="useColors">1</option>
</single>
</panel></row>
