how to find out the maximum CPU percentage the host reached for last one month

[ksarode]

i want to find out the maximum CPU utilization reached by the server "xyz" in last one month

[xpac]

You only provided little detail, so you'll have to adapt this to your data:

index=yourindex sourcetype=yoursourcetype
| timechart span=1mon max(yourfield) by host

Hope that helps - if it does I'd be happy if you would upvote/accept this answer, so others could profit from it. 🙂

[FrankVl]

Since he is looking for max in last month, a simple | stats max(yourfield) by host would do right (and then use the timepicker to run that over the desired timerange)?

[xpac]

Yeah, I thought it might be useful to have a comparison handy, but that might actually be enough 😉

[xpac]

Please add some details: Do you already have that data? Is it Windows, Linux.... like, basics. 😉

[ksarode]

its an unix box and also these servers are getting monitored in splunk and also CPU,memory,disk is getting monitored to trigger an alert of it is crossing 70%

[ksarode]

but here they want to see the maximum range host has reached in last month