Splunk IT Service Intelligence

Graph of multiple metric_names

Explorer

I have about 100 different metrics_names and I'd like to be able to

  1. Get the metric_name
  2. Plot that metric_name over time

I have about 100 hosts and they all have a metric rack_number and serial_number.

The 100 hosts I don't care about but I want to plot every single metric where rack_number=1 and serial_number=12345 and take a look at it.

Labels (2)
0 Karma

Explorer

I think I may have answered my own question

|mstats avg(_value) as latest_value span=15m WHERE metric_name=* index=* rack_number=1 serial_number=12345 by metric_name
|where latest_value > 10000
|timechart span=15m avg(latest_value) by metric_name limit=0

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!