I found a solution Just needed to write  case( like('operating-system',"Microsoft Windows Server%"), "Windows Server", like('operating-system',"Microsoft Windows%"), "Windows OS", like('operating-system',"%Linux%"), "Linux", like('operating-system',"%CentOS%"), "Linux", like('operating-system',"%Debian%"), "Linux", like('operating-system',"%CentOS%"), "Linux" ) ... View more

@Pikta  Thanks for the reply.  The intended server is actually a Database server managing the production data and we want the CPU usage to be monitored by Splunk. In terms of hardware, it is well equipped and it has nearly 1 million DB transactions per day.    ... View more

Yes, I always include something in the Message field. ... View more

thanks one more time ... View more