Dashboards & Visualizations

trying to list CPU and Mem in a pie chart (broken down by processes) using both per client. - *Nix based clients

jshekell
Explorer

CPU SIDE Created already (line chart top 5)
index=main host=$host_tok$ sourcetype=cpu |search host = bwboxipt* OR host = pbvlbm* OR host = pbvlepsw* OR host = pbvlds* OR host = pbvljbat* OR host = pbvlsnim* OR host = pbvlepnim* OR host = pbvlswork* OR host = pbvlsweb* OR host = usatlicdwas* OR host = usatlwswas* OR host = usbldwswas* OR host = usbldihs*|eval cpu_util = PercentSystemTime + PercentUserTime | timechart useother=f limit=5 avg(cpu_util) as cpu_perc by host |

Memory Side created already (line chart top 5)
index=main host=$host_tok$ sourcetype=vmstat |search host = bwboxipt* OR host = pbvlbm* OR host = pbvlepsw* OR host = pbvlds* OR host = pbvljbat* OR host = pbvlsnim* OR host = pbvlepnim* OR host = pbvlswork* OR host = pbvlsweb* OR host = usatlicdwas* OR host = usatlwswas* OR host = usbldwswas* OR host = usbldihs*| timechart useother=f limit=5 avg(memUsedPct) as mem_perc by host

Tags (1)
0 Karma

jshekell
Explorer

need the time to update every 10 min

0 Karma

eregon
Path Finder

@jshekell can you provide some details on what you are trying to achieve? What are you missing in your solution?

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...