well, any metric!
So I go to Hosts, select a host, and then the process stats has an inspector link.
This search has completed and found 1 matching event. However, the transforming commands in the highlighted portion of the following search:
search index=os sourcetype=top host=XYZ | stats max(pctCPU) as pctCPU max(pctMEM) as pctMEM last(cpuTIME) as cpuTIME by COMMAND, USER | eval CMD=COMMAND | fields CMD, USER, pctCPU, pctMEM, cpuTIME
over the time range:
4/2/14 10:30:37.000 AM – 1/1/01 12:00:00.000 AM
generated no results.
... View more