Knowledge Management

tag based search is not working on mstats command

dmuraleetcs
Explorer

Does anyone know why the tag based search is not working in metric based commands. Is there any restriction or any alternative approach?

Working here,

 

index=_internal tag=windows_lab_iis

 

 

No Results for this command,

 

| mcatalog values(metric_name) WHERE tag=windows_lab_iis index=metrics* BY index, host

 

 

Labels (2)
Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

I suspect mcatalog is failing because the metrics index does not contain the fields referenced in the tag.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...