Splunk Search

Gauge to show current % usage of monthly bandwidth

stevenhorner
New Member

I am trying to produce a gauge which will display the current percentage used of my fixed monthly bandwidth of 200GB.

I have managed to calculate the total used by doing:

stats sum(Received) | rename sum(Received) as TReceived

This then displays the total number of bytes I have received in TReceived and I set the time range to the current month. I can't figure out how to do something like "Usage=100*(214748364800/TReceived)" in Splunk

214748364800 = 200GB

I am stuck please help.

Tags (1)
0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

You could also use the "gauge" command:

stats sum(Received) as TR|eval U=(TR/214748364800)*100|gauge U

http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/Gauge

0 Karma

stevenhorner
New Member

This looks like it would work too and slightly easier. Will give it a go later.

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...