Splunk Search

What is the difference between PercentIdleTime and pctIdle when looking at CPU (index=os)?

burnsidepj
New Member

What is the difference between PercentIdleTime and pctIdle when looking at CPU (index=os)?
I have looked up for answers and this is the closest but does not explain the difference:

http://docs.splunk.com/Documentation/SplunkLight/7.0.1/Examples/Createsearch

index=os sourcetype=cpu host=* | multikv fields PercentIdleTime | eval Percent_CPU_Usage = 100 - pctIdle | where Percent_CPU_Usage > 75
0 Karma

p_gurav
Champion

Both are same. They just created field aliases for pctIdle AS PercentIdleTime.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...