Splunk Search

How to create a single chart showing % Processor Time and % User Time by host?

CSMounsey01
New Member

I'm trying to create a single chart showing % Processor Time and % User Time by host

My example so far:

host="pvawbdap01.ifdsgroup.co.uk" index="bluedoor_registry_perfmon"  source="Perfmon:Processor" | stats avg("% Processor Time") as hRs, avg("% User Time") as ssns by _time,source | eval s1=("% Processor Time % User Time") | makemv s1 | mvexpand s1 | eval yval=case(s1==("% Processor Time"),hRs,s1==("% User Time"),ssns) | eval series=source+":"+s1 | xyseries _time,series,yval
0 Karma

lguinn2
Legend

Would this work?

 host="pvawbdap01.ifdsgroup.co.uk" index="bluedoor_registry_perfmon"
      source="Perfmon:Processor"
 | stats avg("% Processor Time") as hRs, avg("% User Time") as ssns by source
0 Karma
Get Updates on the Splunk Community!

The Payment Operations Wake-Up Call: Why Financial Institutions Can't Afford ...

The same scenario plays out across financial institutions daily. A payment system fails at 11:30 AM on a busy ...

Make Your Case: A Ready-to-Send Letter for Getting Approval to Attend .conf25

Hello Splunkers, Want to attend .conf25 in Boston this year but not sure how to convince your manager? We've ...

Community Spotlight: A Splunk Expert's Journey

In the world of data analytics, some journeys leave a lasting impact not only on the individual but on the ...