Getting Data In

How to filter by dimension and include names in mstats result?

bdjoulica
New Member

Hi All,

I am looking for a way to filter by dimensions and include their name in mstats result so that down the line I can have charts per metric and dimension. What is the way of referencing custom dimensions?

Regards,
Bartosz

0 Karma

effem
Communicator

I'm not really sure what you want to accomplish directly.
But if you use mstats like this:

| mstats latest(_value) AS last_value WHERE index="my_metrics" metric_name="*" by custom_dimension, metric_name

You are able to use metric_name as well as the custom_dimension field after this command. As well as metric_name and the values of all the metrics.
hope that helps.

p_gurav
Champion

Can you provide some sample data?

0 Karma
Get Updates on the Splunk Community!

Operationalizing TDIR: Building a More Resilient, Scalable SOC

Optimizing SOC workflows with a unified, risk-based approach to Threat Detection, Investigation, and Response ...

Pro Tips for First-Time .conf Attendees: Advice from SplunkTrust

Heading to your first .Conf? You’re in for an unforgettable ride — learning, networking, swag collecting, ...

Raise Your Skills at the .conf25 Builder Bar: Your Splunk Developer Destination

Calling all Splunk developers, custom SPL builders, dashboarders, and Splunkbase app creators – the Builder ...