Dashboards & Visualizations

trying to list CPU and Mem in a pie chart (broken down by processes) using both per client. - *Nix based clients

jshekell
Explorer

CPU SIDE Created already (line chart top 5)
index=main host=$host_tok$ sourcetype=cpu |search host = bwboxipt* OR host = pbvlbm* OR host = pbvlepsw* OR host = pbvlds* OR host = pbvljbat* OR host = pbvlsnim* OR host = pbvlepnim* OR host = pbvlswork* OR host = pbvlsweb* OR host = usatlicdwas* OR host = usatlwswas* OR host = usbldwswas* OR host = usbldihs*|eval cpu_util = PercentSystemTime + PercentUserTime | timechart useother=f limit=5 avg(cpu_util) as cpu_perc by host |

Memory Side created already (line chart top 5)
index=main host=$host_tok$ sourcetype=vmstat |search host = bwboxipt* OR host = pbvlbm* OR host = pbvlepsw* OR host = pbvlds* OR host = pbvljbat* OR host = pbvlsnim* OR host = pbvlepnim* OR host = pbvlswork* OR host = pbvlsweb* OR host = usatlicdwas* OR host = usatlwswas* OR host = usbldwswas* OR host = usbldihs*| timechart useother=f limit=5 avg(memUsedPct) as mem_perc by host

Tags (1)
0 Karma

jshekell
Explorer

need the time to update every 10 min

0 Karma

eregon
Path Finder

@jshekell can you provide some details on what you are trying to achieve? What are you missing in your solution?

0 Karma
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...