Monitoring Splunk

CPU Pie Chart

jlaigo2
Path Finder

Have been trying to get a pie chart that reps the cpu usage. IE the following log format.
Any one have a clue if I can create a pie chart with a multikv fields?

CPU LOAD USER NICE SYS IDLE BLOCK SWAIT INTR SSYS
avg 0.74 8.0% 2.8% 11.8% 77.4% 0.0% 0.0% 0.0% 0.0%

Tags (1)
1 Solution

Ayn
Legend

Assuming you have the fields extracted, you can use transpose to get a chart formatted in a way that can be used for a pie chart. Since a pie chart doesn't deal with time-series data, it will use only the first row of the table it's supplied with. It's cleaner to add | head 1 to the search to show explicitly what data is used for the pie chart though.

<yourbasesearch> | head 1 | table USER NICE SYS IDLE BLOCK SWAIT INTR SSYS | transpose

View solution in original post

jlaigo2
Path Finder

Works perfect thanks for the help:)

0 Karma

Ayn
Legend

Assuming you have the fields extracted, you can use transpose to get a chart formatted in a way that can be used for a pie chart. Since a pie chart doesn't deal with time-series data, it will use only the first row of the table it's supplied with. It's cleaner to add | head 1 to the search to show explicitly what data is used for the pie chart though.

<yourbasesearch> | head 1 | table USER NICE SYS IDLE BLOCK SWAIT INTR SSYS | transpose
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...