Dashboards & Visualizations

trying to list CPU and Mem in a pie chart (broken down by processes) using both per client. - *Nix based clients

jshekell
Explorer

CPU SIDE Created already (line chart top 5)
index=main host=$host_tok$ sourcetype=cpu |search host = bwboxipt* OR host = pbvlbm* OR host = pbvlepsw* OR host = pbvlds* OR host = pbvljbat* OR host = pbvlsnim* OR host = pbvlepnim* OR host = pbvlswork* OR host = pbvlsweb* OR host = usatlicdwas* OR host = usatlwswas* OR host = usbldwswas* OR host = usbldihs*|eval cpu_util = PercentSystemTime + PercentUserTime | timechart useother=f limit=5 avg(cpu_util) as cpu_perc by host |

Memory Side created already (line chart top 5)
index=main host=$host_tok$ sourcetype=vmstat |search host = bwboxipt* OR host = pbvlbm* OR host = pbvlepsw* OR host = pbvlds* OR host = pbvljbat* OR host = pbvlsnim* OR host = pbvlepnim* OR host = pbvlswork* OR host = pbvlsweb* OR host = usatlicdwas* OR host = usatlwswas* OR host = usbldwswas* OR host = usbldihs*| timechart useother=f limit=5 avg(memUsedPct) as mem_perc by host

Tags (1)
0 Karma

jshekell
Explorer

need the time to update every 10 min

0 Karma

eregon
Path Finder

@jshekell can you provide some details on what you are trying to achieve? What are you missing in your solution?

0 Karma
Get Updates on the Splunk Community!

3 Ways to Make OpenTelemetry Even Better

My role as an Observability Specialist at Splunk provides me with the opportunity to work with customers of ...

What's New in Splunk Cloud Platform 9.2.2406?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2406 with many ...

Enterprise Security Content Update (ESCU) | New Releases

In August, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...