Hi Experts Good Day Below is my search: index="web_summary_index" source="resp_time_ss"| eval 7daybackdate=strftime(relative_time(now(), "-7d@d" ),"%Y-%m-%d") |eval date=strftime(_time,"%d-%m-%Y") | stats dc(cs_uri_stem) as Total by date I get the output in below format date count 2016-11-01 5 ... .. . 2016-11-10 50 2016-11-11 75 2016-11-12 100 My requirement: I want to get just today's date and last week's same day count only, and also create a chart for the same. I want to add it in the dashboard for my Manager's view, but I am not really sure how to use timechart for this. Can you please help? Thanks, aparna ... View more

Hello I have 2 queries, one to find top 10 CPU utilising process and 1 more for finding the avg CPU utilisation but I am not sure how to combine both of them in 1 query My requirement is, if CPU utilisation is greater than 70% then we must get the top 10 running process for those servers so that it will help us in troubleshooting in 1 report Query-1 : To get list of Top process index= infra earliest=-15m source="Perfmon:Process" counter="% Processor Time" (instance!="_Total" AND instance!="Idle" AND instance!="System") | eventstats avg(Value) as AvgValue by host,instance | top instance by AvgValue,host limit=10 showperc=f showcount=f| sort -host,-AvgValue Query-2: Get the list of servers whose CPU utilisation is greater than 70% | loadjob savedsearch="nobody:cdfs-infg:infra_saved_search"|stats latest(CPU) as CPU,latest(Memory) as Memory, latest(Swap) as Swap by Server | lookup inventory "Server Name" as Server OUTPUT "Application Name" |table "Application Name",Server,CPU,Memory,Swap |eval CPU=round(CPU,2)| eval total_memory=round((Memory+Swap),2) |eval Swap=round(Swap,2)| dedup Server,CPU,Memory,Swap | where CPU>70 OR total_memory>70 | sort - total_memory Can you please help ? Thank you so much ! aparna ... View more

we would like to know if child objects have constraints AND attributes on their own ... View more

Hello Good Day ! We have recently installed splunk and we are monitoring the DB related health after installing Forwarder in DB Servers Can you please let me know if there are additional features that are available if we use database connect, if yes please let me know if there is any documentation I can refer If there already a pre-built app that I can refer kindly let me know the details for them also thank you for helping thanks aparna ... View more

We have added the below code in out inputs.conf file for 50+ servers I am not sure on how to check the free space via search Can you please guide me on this? We want to find the total used and available disk space [perfmon://Free Disk Space] counters = Free Megabytes;% Free Space disabled = 0 instances = _Total interval = 120 object = LogicalDisk index = infra_index Thanks aparna ... View more