I'm trying to plot total load-avg vs number of processors in a cluster (i.e. how loaded is the system). The following basically works:
numproc OR loadshort | transaction xid | bucket span=10m _time | timechart span=10m sum(numproc) sum(loadshort)
Except we occasionally see multiple data items posted in a given 10min window -- e.g. {host,load1,numproc,time1} and {host,load2,numproc,time2} both land in the same time-bucket. The above commands adds in the numproc value twice, which obscures the real load on the system.
Is there a way to dedup the data after its been bucketed? or, maybe said another way, to dedup the data within a single bucket?
... View more