Getting Data In

metrics - individual events

ykpramodhcbt
Path Finder

Hi Splunkers,

We are evaluating moving to metrics events for our existing apps. In our apps, we have to display the latest value of the corresponding tag by time.

From documentation, we find that we might not be able to do it
Source: https://docs.splunk.com/Documentation/Splunk/7.0.1/Metrics/Search

1. You cannot search metrics data for individual metric events. 
2. You cannot use automatic lookups with metrics data. This is because automatic lookups are applied to individual events, whereas metrics are analyzed as an aggregate.

Please suggest if there are any work-arounds.

0 Karma

micahkemp
Champion

mstats allows the use of the latest function, which seems like it would give you what you’re looking for.

Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...