About demonspork

demonspork · ‎10-04-2010

args = host definition = index="os" sourcetype="interfaces" host=* | multikv fields name, inetAddr, RXbytes, TXbytes | streamstats current=f last(TXbytes) as lastTX, last(RXbytes) as lastRX by Name | eval time=_time | strcat Name "-" inetAddr "@" host Interface_Host | eval RX_Thruput = lastRX-RXbytes | eval TX_Thruput = lastTX-TXbytes | timechart eval(sum(TX_Thruput)/dc(time)) by Interface_Host is the line in the unix app files that seems that it is supposed to do this task. I run that search manually and it gives the error about missing fields.

demonspork · ‎10-04-2010

I am trying to use *NIX to monitor my network throughput statistics and graph them nicely, I am currently using Bandwidthd but I would like to get it all usable in one interface. Everything else worked perfectly, CPU, Memory, faiiled login detection, everything graphs nicely. But when I try to monitor the network by throughput, I get this at the top of the page: Specified field(s) missing from results: 'TX_Thruput' running locally on Ubuntu 10.04 splunk 4.1.5 build 85165. I have all of the options checked for the *NIX configuration. I checked out the searches suggested in http://answers.splunk.com/questions/4287/measure-throughput-eps-kbps-per-input but they return no results.

Posts	2
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎10-04-2010

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

Network throughput monitor

Re: Network throughput monitor

Network throughput monitor