Dashboards & Visualizations

trying to list CPU and Mem in a pie chart (broken down by processes) using both per client. - *Nix based clients

jshekell
Explorer

CPU SIDE Created already (line chart top 5)
index=main host=$host_tok$ sourcetype=cpu |search host = bwboxipt* OR host = pbvlbm* OR host = pbvlepsw* OR host = pbvlds* OR host = pbvljbat* OR host = pbvlsnim* OR host = pbvlepnim* OR host = pbvlswork* OR host = pbvlsweb* OR host = usatlicdwas* OR host = usatlwswas* OR host = usbldwswas* OR host = usbldihs*|eval cpu_util = PercentSystemTime + PercentUserTime | timechart useother=f limit=5 avg(cpu_util) as cpu_perc by host |

Memory Side created already (line chart top 5)
index=main host=$host_tok$ sourcetype=vmstat |search host = bwboxipt* OR host = pbvlbm* OR host = pbvlepsw* OR host = pbvlds* OR host = pbvljbat* OR host = pbvlsnim* OR host = pbvlepnim* OR host = pbvlswork* OR host = pbvlsweb* OR host = usatlicdwas* OR host = usatlwswas* OR host = usbldwswas* OR host = usbldihs*| timechart useother=f limit=5 avg(memUsedPct) as mem_perc by host

Tags (1)
0 Karma

jshekell
Explorer

need the time to update every 10 min

0 Karma

eregon
Path Finder

@jshekell can you provide some details on what you are trying to achieve? What are you missing in your solution?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...