Splunk Enterprise

How I can combine avgCpuUtilization and maxCpuUtilization with UK_DC?

Path Finder



| rex field=_raw "measResults\W(?<avgCpuUtilization>\d{0,3})\s(?<maxCpuUtilization>\d{0,3})"
| rex field=_raw "PLMN-PLMN\W\w+-\d\W\w\w\w-\d{0,3}.\d{0,3}.\d{0,3}.\d{0,3}@(?<RB_OR_LVS_DC>\w+-\w+)"

| eventstats avg(avgCpuUtilization) as AvgCPU max(maxCpuUtilization) as MaxCPU count by UK_OR_USA_DC

| stats count by month,RB_OR_LVS_DC,month_name,monthyear,AvgCPU,MaxCPU

| table month_name,AvgCPU,MaxCPU,UK_OR_USA_DC




UK_OR_USA_DC contain 2 values UK_DC and USA_DC, i want to calculate avgCpuUtilization and maxCpuUtilization for both UK_DC and USA_DC.

so their  will be having 4 values



avgCpuUtilization_USA_DC , 


i am unable to fecth this , how i can combine avgCpuUtilization and maxCpuUtilization with UK_DC . request your help on this 

Labels (1)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

New Splunk Observability innovations: Deeper visibility and smarter alerting to ...

You asked, we delivered. Splunk Observability Cloud has several new innovations giving you deeper visibility ...

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...