Have been trying to get a pie chart that reps the cpu usage. IE the following log format.
Any one have a clue if I can create a pie chart with a multikv fields?
CPU LOAD USER NICE SYS IDLE BLOCK SWAIT INTR SSYS
avg 0.74 8.0% 2.8% 11.8% 77.4% 0.0% 0.0% 0.0% 0.0%
Assuming you have the fields extracted, you can use transpose
to get a chart formatted in a way that can be used for a pie chart. Since a pie chart doesn't deal with time-series data, it will use only the first row of the table it's supplied with. It's cleaner to add | head 1
to the search to show explicitly what data is used for the pie chart though.
<yourbasesearch> | head 1 | table USER NICE SYS IDLE BLOCK SWAIT INTR SSYS | transpose
Works perfect thanks for the help:)
Assuming you have the fields extracted, you can use transpose
to get a chart formatted in a way that can be used for a pie chart. Since a pie chart doesn't deal with time-series data, it will use only the first row of the table it's supplied with. It's cleaner to add | head 1
to the search to show explicitly what data is used for the pie chart though.
<yourbasesearch> | head 1 | table USER NICE SYS IDLE BLOCK SWAIT INTR SSYS | transpose