We have output of 2 queries in terms of disk usage. One is from DELL and one is rom Huawei index.
Dell Query:
|`cluster_overview(isisyd)` | table _time stats.key lnn stats.value | search (stats....
See more...
We have output of 2 queries in terms of disk usage. One is from DELL and one is rom Huawei index.
Dell Query:
|`cluster_overview(isisyd)` | table _time stats.key lnn stats.value | search (stats.key="ifs.bytes.avail" OR stats.key="ifs.bytes.used" OR stats.key="ifs.ssd.bytes.free" OR stats.key="ifs.ssd.bytes.used") | eval Usage = case('stats.key'="ifs.bytes.avail","HDD Available",'stats.key'="ifs.bytes.used","HDD Used",'stats.key'="ifs.ssd.bytes.free","SSD Available",'stats.key'="ifs.ssd.bytes.used","SSD Used") | `bytes_to_gb_tb_pb('stats.value')` | eval Usage = Usage . " (in GB)" | stats latest(bytes_gb) AS Space by Usage
Huawei query:
index="huawei_storage" | fields DeviceModel,Version,WWN,SN,TotalCapacity,UsableCapacity,UsedCapacity,DataProtection,FreeCapacity | dedup SN | table DeviceModel,Version,WWN,SN,TotalCapacity,UsableCapacity,UsedCapacity,DataProtection,FreeCapacity
Attached SS suggests the current individual output. End goal is to have one single table combining both Huawei and Dell storage capacity information. Any help is appreciated.