Splunk ITSI

Graph of multiple metric_names

terpdog
Explorer

I have about 100 different metrics_names and I'd like to be able to

  1. Get the metric_name
  2. Plot that metric_name over time

I have about 100 hosts and they all have a metric rack_number and serial_number.

The 100 hosts I don't care about but I want to plot every single metric where rack_number=1 and serial_number=12345 and take a look at it.

Labels (2)
0 Karma

terpdog
Explorer

I think I may have answered my own question

|mstats avg(_value) as latest_value span=15m WHERE metric_name=* index=* rack_number=1 serial_number=12345 by metric_name
|where latest_value > 10000
|timechart span=15m avg(latest_value) by metric_name limit=0

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...