- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
In my index vital metrics, how can i find host status ( which can take up or down values)?
chimell1
Explorer
03-03-2023
08:34 AM
Hi Community
In my index vital metrics how can i find host status ( which can take up or down values)
Up when host is up
Down when host is down
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
gcusello
SplunkTrust
03-03-2023
08:38 AM
Hi @chimell1,
in general you could run something like this:
index=your_index (up OR down)
| eval status=if(searchmatch("up"),"up","down")
| ...
could you share a sample of your data to test it?
then what do you want to obtain?
Ciao.
Giuseppe
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
chimell1
Explorer
03-03-2023
08:52 AM
This is my search
|mpreview index=*_vitals_windows_metric
And belong is a screen short of my result.
I want to knom the status of each host
thank you
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
chimell1
Explorer
03-03-2023
08:42 AM
Hi gcusello Thank you for your answer Please know that my index is: *vitals_window_metric I can not see up or down values in my metric event of my index Thank