Getting Data In

Sourcetype="cpu" Not displaying any Values

_gkollias
Builder

When I search index="os" host=xxxyyzzz* sourcetype="cpu" , I'm getting this result:

10/8/13
2:59:13.000 PM

CPU pctUser pctNice pctSystem pctIowait pctIdle
host=xxxyyzz03 Options| sourcetype=cpu Options| source=cpu Options

If I search hosts other than the ones I'm searching, I get a list of values under CPU, pctUser, etc:

10/8/13
3:01:40.000 PM

CPU pctUser pctNice pctSystem pctIowait pctIdle
01 9.7 ? 32.6 4.5 53.2
02 1.6 ? 2.7 0.0 95.7
03 0.0 ? 0.0 0.0 100.0
04 0.0 ? 0.0 0.0 100.0
05 2.2 ? 10.8 0.1 86.9
06 0.1 ? 4.1 0.0 95.8
07 0.0 ? 2.5 0.0 97.5
08 0.0 ? 1.2 0.0 98.8
all 17.8 ? 21.3 0.1 60.7
Collapse back to 10 lines
host=xxxyyzz04 Options| sourcetype=cpu Options| source=cpu Options

Any idea on what could be causing this?

Thanks in advance!

Tags (1)
0 Karma

kphillipson
Path Finder

If this is a Linux box, is the sysstat package installed? In the CLI if you run cpu.sh from the bin dir, do you see results?

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Are the OSes the same?

0 Karma
Get Updates on the Splunk Community!

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...