Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
23 results
Sorted by:
09-11-2018
03:38 PM
...sing mcollect .
Not sure why, but the metrics index is not valid when it recieved metrics from a different method.
.... | mcollect index=metrics-index
And on my indexes.conf, the settings i...
Show results in replies (5)
-
index=xyz source=abc |table coloumnone coloumtwo |mcollect index=metric_index split=true c...
-
...ame and datatype for any of the collect (ie. collect, mcollect, meventcollect). Note: for metric i...
-
...time, value, a_dimension, metric_name | mcollect index=test_metric _time value a_dimension m...
-
...o special characters in the name. 2B) Try your query with mcollect with that new index. If t...
-
Okay so to resolve the issue, setup the metrics index on the search head cluster. Missing the ind...
02-23-2021
10:28 AM
I've got some events I'm converting to metrics using mcollect with a scheduled report. Does anyone know how to get the metrics to store the original host from the logs instead of whichever indexer t...
- Tags:
- mcollect host
Labels
- Labels:
-
other
10-31-2018
10:43 AM
....count"
| mcollect index=testmetrics
The results table LOOKS fine. But the final product has the wrong time.
01-09-2020
09:19 AM
...host = test01
source = PerfmonMk:System
sourcetype = PerfmonMk:System
Here is my mcollect search
index=perfmon host=test01* sourcetype="PerfmonMk:System"
| rename _time as m...
11-30-2018
02:05 AM
...time
| table _time test delay
This issue is reproducible with the mcollect command on metrics index.
My environment is just a full Splunk instance on a Windows server with a few forwarders t...
06-25-2019
07:13 AM
...nauthbinds: [ [-]
327
]
wholesubtreesearchops: [ [-]
2849
]
}
The big question is:
How to introduce this in a metric suitable for a metric index
I tried some tricks with mcollect...
09-30-2020
03:48 AM
Hello, I am using Splunk Enterprise 7.3.2. and I have structured event data within an events index that I am trying to convert into metrics data so that I can store it in a metrics index. I am...
Labels
- Labels:
-
index
-
other
-
sourcetype
-
time
08-26-2020
01:31 AM
...ndex -datatype metric ). However, when I try and search the index using | mcollect split=t index="trackme_metrics" I get the following: " Error in 'mcollect' command: Must specify a valid m...
Show results in replies (3)
-
I suspect you may be confused here, you are running | mcollect which collects data into a metrics i...
-
...ollect and mcollect commands in different reports, which would lead appinspect to fail if the i...
-
The solution that I found, and as mentioned by others in different scenarios, is that the Metrics I...
06-11-2019
11:03 PM
All,
I see a few examples on convert an event received into a metric. Is there a way to say keep an apache log and create a metric of the stratus?
thanks
-Daniel
03-19-2019
02:32 PM
...onfirmed we are collecting metrics from the system via | mstats and | mcollect on our SH and see the hostname within the content of the metric index and metrics counts. I also confirmed we are getting l...
