In my index vital metrics, how can i find host status ( which can take up or down values)?

[chimell1]

Hi Community

In my index vital metrics how can i find host status ( which can take up or down values)

Up when host is up

Down when host is down

[gcusello]

Hi @chimell1,

in general you could run something like this:

index=your_index (up OR down)
| eval status=if(searchmatch("up"),"up","down")
| ...

could you share a sample of your data to test it?

then what do you want to obtain?

Ciao.

Giuseppe

[chimell1]

This is my search

|mpreview index=*_vitals_windows_metric

And belong is a screen short of my result.

I want to knom the status of each host

thank you

[chimell1]

Hi gcusello Thank you for your answer Please know that my index is:  *vitals_window_metric I can not see up or down values in my metric event of my index Thank