Splunk Search

Splunk Observability Cloud - Kubernetes Monitoring - CPU Limit

parumugam
Observer

I am using Splunk Observability Cloud for Kubernetes monitoring and trying to retrieve data for container CPU limits using the k8s.container.cpu_limit metric, but I'm not getting any data.

data('k8s.container.cpu_limit',rollup='average').sum(by=['k8s.container.name','k8s.pod.name', 'k8s.pod.uid', 'k8s.node.name', 'k8s.cluster.name'])

Thanks in advance!

 

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @parumugam 

Just to confirm - are you seeing data when you do this?

A = data('k8s.container.cpu_limit').publish(label='A')

If you click on "Data Table" tab, do you see all of the fields your doing the sum BY of?

livehybrid_0-1742481020435.png

 

How are you trying to display this? Try your query with the Table view to see if this works.

One last thing - I presume you have published the values (e.g. with .publish()) ? 

Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards

Will

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...