Splunk Search

What is the difference between PercentIdleTime and pctIdle when looking at CPU (index=os)?

burnsidepj
New Member

What is the difference between PercentIdleTime and pctIdle when looking at CPU (index=os)?
I have looked up for answers and this is the closest but does not explain the difference:

http://docs.splunk.com/Documentation/SplunkLight/7.0.1/Examples/Createsearch

index=os sourcetype=cpu host=* | multikv fields PercentIdleTime | eval Percent_CPU_Usage = 100 - pctIdle | where Percent_CPU_Usage > 75
0 Karma

p_gurav
Champion

Both are same. They just created field aliases for pctIdle AS PercentIdleTime.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!