thanks @Sukisen1981, i expanded a little bit and came up with the following which gives me exactly what i need.
index=pcf foundation=$foundation_token$ sourcetype=cf:valuemetric job_index="*" name=Capacity*
| stats list(name),list(value) by _time,job_index
| rename list(name) as name,list(value) as value
| eval x=mvzip(name,value,":")
| fields job_index,x
| nomv x
| rex field=x "CapacityTotalDisk:(?<CapacityTotalDisk>.*)\s+"
| rex field=x "CapacityRemainingDisk:(?<CapacityRemainingDisk>.*)\s+"
| rex field=x "CapacityTotalMemory:(?<CapacityTotalMemory>.*?)\s+"
| rex field=x "CapacityAllocatedMemory:(?<CapacityAllocatedMemory>.*?)\s+"
| rex field=x "CapacityRemainingMemory:(?<CapacityRemainingMemory>.*?)\s+"
| rex field=x "CapacityTotalContainers:(?<CapacityTotalContainers>.*?)\s+"
| rex field=x "CapacityRemainingContainers:(?<CapacityRemainingContainers>.*?)\s+"
| eval CapacityAllocatedContainers=(CapacityTotalContainers-CapacityRemainingContainers)
| fields _time,job_index,CapacityTotalMemory,CapacityAllocatedMemory,CapacityRemainingMemory,CapacityTotalDisk,CapacityRemainingDisk,CapacityTotalContainers,CapacityAllocatedContainers,CapacityRemainingContainers
| stats avg(CapacityTotalMemory) as totalMemory,
avg(CapacityAllocatedMemory) as allocatedMemory,
avg(CapacityRemainingMemory) as remainingMemory,
sparkline(avg(CapacityRemainingMemory)) as "remainingMemory trend",
avg(CapacityTotalDisk) as totalDisk,
avg(CapacityRemainingDisk) as remainingDisk,
sparkline(avg(CapacityRemainingDisk)) as "remainingDisk trend",
avg(CapacityTotalContainers) as totalContainers,
avg(CapacityAllocatedContainers) as allocatedContainers,
avg(CapacityRemainingContainers) as remainingContainers,
sparkline(avg(CapacityRemainingContainers)) as "remainingContainers trend" by job_index
| eval allocatedMemory=round(allocatedMemory,2),
remainingMemory=round(remainingMemory,2),
remainingDisk=round(remainingDisk,2),
remainingContainers=round(remainingContainers,0),
allocatedContainers=round(allocatedContainers,0)
| sort +remainingMemory
... View more