Splunk ITSI

Signalflow - retrieve multiple metrics at once?

dmoberg
Path Finder

I am trying to extract multiple metrics at once using a Signalflow query, but I am not sure if this is supported or just not undocumented. 

One metric works fine:
| sim flow query=" data('k8s.hpa.current_replicas', filter............"

Wildcard matching metrics works fine too:

| sim flow query=" data('k8s.hpa*', filter............"

But I have not been able to extract multiple named metrics (not wildcarded). Something like this (not working!!!):
| sim flow query=" data('k8s.hpa.current_replicas k8s.hpa.max_replicas', filter............"

 

Any ideas on how to get this to work?

Labels (1)
0 Karma
1 Solution

livehybrid
SplunkTrust
SplunkTrust

Hi @dmoberg 

You could define multiple metrics as their own streams such as:

livehybrid_0-1752484982705.png

 

|sim flow resolution=5000 query="A = data('demo.trans.count', rollup='rate').publish(label='A');B = data('demo.trans.latency', rollup='rate').publish(label='B')"
| chart latest(_value) over _time by sf_streamLabel

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

View solution in original post

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @dmoberg 

You could define multiple metrics as their own streams such as:

livehybrid_0-1752484982705.png

 

|sim flow resolution=5000 query="A = data('demo.trans.count', rollup='rate').publish(label='A');B = data('demo.trans.latency', rollup='rate').publish(label='B')"
| chart latest(_value) over _time by sf_streamLabel

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...