Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
34 results
Sorted by:
07-08-2019
11:44 AM
...,
1=1, Value)
| rex field=asset_name "(?.).(?.)"
| eval _value=Value
| where isnum(_value)
| table asset metric_name Value _time
| mcollect index=iiot_index_metric asset,m...
09-11-2018
03:38 PM
...sing mcollect .
Not sure why, but the metrics index is not valid when it recieved metrics from a different method.
.... | mcollect index=metrics-index
And on my indexes.conf, the settings i...
Show results in replies (5)
-
index=xyz source=abc |table coloumnone coloumtwo |mcollect index=metric_index split=true c...
-
...ame and datatype for any of the collect (ie. collect, mcollect, meventcollect). Note: for metric i...
-
...time, value, a_dimension, metric_name | mcollect index=test_metric _time value a_dimension m...
-
...o special characters in the name. 2B) Try your query with mcollect with that new index. If t...
-
Okay so to resolve the issue, setup the metrics index on the search head cluster. Missing the ind...
02-23-2021
10:28 AM
1 Karma
I've got some events I'm converting to metrics using mcollect with a scheduled report. Does anyone know how to get the metrics to store the original host from the logs instead of whichever indexer t...
- Tags:
- mcollect host
Labels
- Labels:
-
other
10-31-2018
10:43 AM
....count"
| mcollect index=testmetrics
The results table LOOKS fine. But the final product has the wrong time.
04-27-2020
05:55 PM
...ase(metric_name="cpu_percent", "%_Processor_Time")| eval _value=maximum
| fields host,metric_name,namespace,_time,_value
| eval prefix="Processor." | mcollect index=azure_metrics_summary p...
- Tags:
- splunk-enterprise
01-09-2020
09:19 AM
...host = test01
source = PerfmonMk:System
sourcetype = PerfmonMk:System
Here is my mcollect search
index=perfmon host=test01* sourcetype="PerfmonMk:System"
| rename _time as m...
10-02-2019
02:34 PM
All,
Is there a way to selectively send data to differnt indexer groups? In my case I have a search head reading from local indexers and I need to send certain metrics and summary logs to a Cloud...
11-25-2019
01:32 AM
I have used mcollect command to populate my metric index later i tried to pull up that data via mstats command but found out that my index is empty, command used to put data in metric index is i...
11-30-2018
02:05 AM
...time
| table _time test delay
This issue is reproducible with the mcollect command on metrics index.
My environment is just a full Splunk instance on a Windows server with a few forwarders t...
05-06-2019
05:45 PM
All,
I have a |mcollect job that runs every night. I'd like the the results to goto a different indexer rather than the default on my search heads.
How do I specify the metric sourcetype in a...
