Splunk IT Service Intelligence

Graph of multiple metric_names

Explorer

I have about 100 different metrics_names and I'd like to be able to

  1. Get the metric_name
  2. Plot that metric_name over time

I have about 100 hosts and they all have a metric rack_number and serial_number.

The 100 hosts I don't care about but I want to plot every single metric where rack_number=1 and serial_number=12345 and take a look at it.

Labels (2)
0 Karma

Explorer

I think I may have answered my own question

|mstats avg(_value) as latest_value span=15m WHERE metric_name=* index=* rack_number=1 serial_number=12345 by metric_name
|where latest_value > 10000
|timechart span=15m avg(latest_value) by metric_name limit=0

0 Karma