Getting Data In

Message rate meter Exchange 2010

ohl
New Member

Is there any way to change the scale on the message meter in the Exchange app? We normally generate about 10k emails an hour, so the meter always stays pegged.

Thanks,

Matt

Tags (2)
0 Karma

ahall_splunk
Splunk Employee
Splunk Employee

Hi Matt,

Yes - and it's simple. Create a local macros.conf with the following in it:

[msgs-per-hr-gauge]
definition = gauge count 0 10000 20000 30000

The first number is the low point of the gauge; the second number is the transition between green and yellow; the third number is the transition between yellow and red, and the fourth number is the top of the gauge. You can set these numbers to whatever you want.

While we are at it, take a look at the default/macros.conf file - there are other macros that are commonly replaced (such as the definition of what is an internal IP) that you probably want to look at.

Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...