I am trying to graph BytesTotalPersec for the four interfaces on a particular server. The name of each interface is:
The index has the stats for all four interfaces, but in the Pick fields section, Name only contains one value and that value is Intel[R].
Thanks for the help.
--Carl
You need to do your own field extraction (instead of allowing Splunk to do it automatically because it will stop at the first whitespace unless the whole thing is enclosed in double-quotes), with rex
command:
http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Rex
I don't see a field extraction that matches Name, so I guess it's my own.
Sorry, I meant: is there an app doing the field extractions (i.e. the Windows app), or are they your own?
Search....
What app are you using?