It's not about the data . It is about showing it in single dashboard. Since I have lots of applications,i cannot create each panel for each application since it is alot. So want to know best way to show it.
... View more
It has data like application server status , what is the cpu memory logical disk value, db status, service and process status. Index is same for all applications. Its just that we have given application field name as "subsystem". These data is pulled via some saved searches. And stored as fields name and it's values. ( Like Cpu as field name and it's value as field value)
... View more
Could you tell me the query for same? I want something like this as panels: Application1 cpu memory service status etc Application2 cpu memory servicestatus etc Application3 cpu memory servicestatus etc . . . . Application50 cpu memory servicestatus etc
... View more
Hi ,
I have a list of applications (40 to 50). I want to create a dashboard where I want to show health status of those (like cpu , memory, service status etc) in panels for those in single dashboard. How can I achieve it in best way.
I cannot create 50 panels for each application displaying all those details. Data is already coming to splunk , i just want to view that in a dashboard. And I want to show all applications details in single view.
How can I achieve this ?
... View more
@richgalloway , It is working fine when i used it at the end. can you explain the logic behind it please. Thank you so much for the answer !!
... View more
Hi All, I'm facing issue while appending results for 2 searches using append command. I have a 2 search which i'm using to get results and also both query has lookup command to get ip_address details from a lookup . Search query1: index=abc filter1=A | eval ..| table * | lookup def host as host OUTPUT ipaddress | stats ..| eval .. Query 2: index=abc filter2=B | eval ..| table * | lookup def host as host OUTPUT ipaddress | stats ..| eval .. Both searches are almost same except "filter" field and eval commands. And i'm using append command to append results as below: index=abc filter1=A | eval ..| table * | lookup def host as host OUTPUT ipaddress | stats ..| eval ..| append [search index=abc filter2=B | eval ..| table * | lookup def host as host OUTPUT ipaddress | stats ..| eval ..] I'm getting error ([subsearch]: Streamed search execute failed because: Error in 'lookup' command: Could not construct lookup) when running above query and runs fine if i run it seperately. Please let me know what i am making wrong.
... View more
We are upgrading OS version to rhel 8.6 on splunk server. Would want to know what is the checklist in respect of splunk installed apps? And how check compatibility with splunk apps ?
... View more