CPU SIDE Created already (line chart top 5)
index=main host=$host_tok$ sourcetype=cpu |search host = bwboxipt* OR host = pbvlbm* OR host = pbvlepsw* OR host = pbvlds* OR host = pbvljbat* OR host = pbvlsnim* OR host = pbvlepnim* OR host = pbvlswork* OR host = pbvlsweb* OR host = usatlicdwas* OR host = usatlwswas* OR host = usbldwswas* OR host = usbldihs*|eval cpu_util = PercentSystemTime + PercentUserTime | timechart useother=f limit=5 avg(cpu_util) as cpu_perc by host |
Memory Side created already (line chart top 5)
index=main host=$host_tok$ sourcetype=vmstat |search host = bwboxipt* OR host = pbvlbm* OR host = pbvlepsw* OR host = pbvlds* OR host = pbvljbat* OR host = pbvlsnim* OR host = pbvlepnim* OR host = pbvlswork* OR host = pbvlsweb* OR host = usatlicdwas* OR host = usatlwswas* OR host = usbldwswas* OR host = usbldihs*| timechart useother=f limit=5 avg(memUsedPct) as mem_perc by host
need the time to update every 10 min
@jshekell can you provide some details on what you are trying to achieve? What are you missing in your solution?