Hi,
i have written script which extracts the load average values and provides the output.by using below output, how can we create charts to display load average?
Since there is no time given in the sample so I will guess it. Let's say if load averages are being calculated at discrete intervals, i.e. the 15 min average does not have data included from the 5 minute average, and 5 minute average doesn't have 1 minute average in it, then if each "output" line is a single event the intuitive graph that becomes is:
index=yourIndex sourcetype=yourSourcetype loadaverage
| rex "value=\"(?<loadAvg>[^\"]+)\""
| timechart max(loadAvg) as LoadAvg
From the visualization options choose Format >> General >> Null Values
as Connect
to ensure the average stays continuous in case of missing values . That shall form the basic timechart at least to start off. Alternatively you can use min
function in timechart.
Since there is no time given in the sample so I will guess it. Let's say if load averages are being calculated at discrete intervals, i.e. the 15 min average does not have data included from the 5 minute average, and 5 minute average doesn't have 1 minute average in it, then if each "output" line is a single event the intuitive graph that becomes is:
index=yourIndex sourcetype=yourSourcetype loadaverage
| rex "value=\"(?<loadAvg>[^\"]+)\""
| timechart max(loadAvg) as LoadAvg
From the visualization options choose Format >> General >> Null Values
as Connect
to ensure the average stays continuous in case of missing values . That shall form the basic timechart at least to start off. Alternatively you can use min
function in timechart.
thank you for your response.
can we show values in single line like below
0.00,0.20,10.00
you might want to explore the transpose
option, something like:
index=yourIndex sourcetype=yourSourcetype loadaverage
| rex "value=\"(?<loadAvg>[^\"]+)\""
| table loadAvg
| transpose
YOu may be missing the output that you wanted to show.
somehow i am not able to copy entire output,i copied single line
but here is the last column from the out put
name="loadaverage|last1min" value="0.00"
name="loadaverage|last5min" value="0.34"/>
name="loadaverage|last15min" value="5.00"/>
sorry here is the output
system time="Thu Jan 19 20:24:50 2017" HostName ="gpd-653-fc88" Days ="76" Users ="2" name="loadaverage|last1min" value="0.00"/>