I'm not sure if the header and footer options were available in 6.2.2. In the 6.3 doc, it is the first time header/footers are discussed. http://docs.splunk.com/Documentation/Splunk/6.3.0/Report/GeneratePDFsofyourreportsanddashboards#Additional_configuration_options_for_integrated_PDF_generation ... View more

index=perfmon sourcetype=perfmon object="Memory" (counter="Memory" OR counter="Available Memory") | eval total=if(counter="Memory",Value,"NA") | stats avg(Value) as avgAvailable latest(total) as total by host object | eval MemoryUtilization=round((total-avgAvailable)/total*100,1) Adding host to by clause of stats should be sufficient. ... View more