How do you evaluate user CPU per user ID?

[bjaylsu]

Can we track CPU usage of users via splunk? We have users that are running lots of transactions. We are looking to determine how those transactions may affect overall CPU and what percent of the CPU is being used by those users within a set time frame.

The OS is Linux. This is for an Atlassian Jira application. I have users who have jobs that run every hour of the day. I'm checking response time by host via my dashboard. From the "interesting fields" section I drilled down to see my Top ten values including user id's/names. I'd like to track CPU % of each user. I have access to CPU data from Splunk, raw events, and unix logs from the host. I can see counts and percentages of the transactions by users, but I'm unsure how to break down CPU per user. Can you advise what data may be needed/required?

[adonio]

if you have the data, everything (almost) is possible
what kind of systems? what OS? do you have access to the data?
overall, the short answer to your question is: "yes".
the long answer is: "yes you can, we will need more info to assist"

[bjaylsu]

The OS is Linux. This is for an Atlassian Jira application. I have users who have jobs that run every hour of the day. I'm checking response time by host via my dashboard. From the "interesting fields" section I drilled down to see my Top ten values including user id's/names. I'd like to track CPU % of each user. I have access to CPU data from splunk, raw events, and unix logs from the host. I can see counts and percentages of the transactions by users, but I'm unsure how to break down CPU per user. Can you advise what data may be needed/required?

[Sukisen1981]

As @adonio said, is it possible to share samples of your data with the relevant fields and then we can assist with what you want... It is hard to suggest/write SPL without looking at the underlying data 🙂