Thanks to the sideview utils, i could create a dynamic overview of hosts per index, creating single values for each host entry. Thereby, I fill each entry with some specifics about that host. What would make it really gorgeous, is when I could use the rangemap command, and light up those hosts that don't have a process running. Somehow, that doesn't seem to work. Any idea's/suggestions?
index="demo-lab" sourcetype=facter | dedup host| rex field=application "(?i)=demo-(?P<customer>[^,]+)" | table host, customer, memorysize, processorcount | eval test="1" | rangemap field=test low=0-300 default=severe
range
test
-60m
now
<module name="Multiplexer">
<param name="fields">host,customer,memorysize,processorcount</param>
<module name="HTML">
<param name="html"><![CDATA[
<div class="valueDisplay">
<div class="inner">$host$</div>
<div class="inner2">customer: $customer$</div>
<div class="inner2">mem:$memorysize$</div>
<div class="inner2">cpu: $processorcount$</div>
</div>
]]></param>
</module>
</module>
... View more