Monitoring Splunk

Passing the variable

bmkreddy234
Engager

| mstats avg(_value) as current where data.consumerName IN("XXXXXXX*") AND NOT (data.consumerName="*OH")AND host="*" AND `delphix_metrics_index` metric_name="system.capacity.consumer.size" span=30s by data.totalSpace, data.consumerName
| eval usage = round((current) / 1024 /1024/1024, 3)
| eval totalGB=round('data.totalSpace' / 1024 / 1024 / 1024, 3)
| eval name = 'data.consumerName'
| eval free = (totalGB - usage) -----------  i want pass the value to calculate the free space , the statment is not working can you please help 
| chart avg(usage) as "Usage (GB)"
avg(totalGB) as "Total (GB)"
avg(free GB) as "FREE MB" by name

Labels (1)
0 Karma
1 Solution

rnowitzki
Builder

Hi @bmkreddy234 ,

Is the issue maybe that you refer to the free space as "avg(free GB)" instead of just avg(free)?

BR
Ralph

--
Karma and/or Solution tagging appreciated.

View solution in original post

0 Karma

rnowitzki
Builder

Hi @bmkreddy234 ,

Is the issue maybe that you refer to the free space as "avg(free GB)" instead of just avg(free)?

BR
Ralph

--
Karma and/or Solution tagging appreciated.
0 Karma

thambisetty
SplunkTrust
SplunkTrust

@bmkreddy234 

Do you see values for totalGB and usage before eval free statement ?

————————————
If this helps, give a like below.
0 Karma

bmkreddy234
Engager

yes

0 Karma
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...