Monitoring Splunk

How to check daily cpu_system_pct using index="_introspection" host=* commands

Ganta
New Member

How to check daily cpu_system_pct using index="_introspection" host= commands*

Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Are you looking for something like this? If not, please add a comment with more details about what you want.

index=_introspection host=* data.cpu_system_pct=* | timechart span=1d avg(data.cpu_system_pct) by host

another way that is faster, but has a different visualization

| tstats max(data.cpu_system_pct) as AvgCPUPct where index=_introspection by host
---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...