a device in our system returns a status message that looks like the following (as seen in splunk search results)
state (UP | DN| STDBY | UNK); parma: (string) , parmb:(int), etc
notice that there is no delimiter between "state" and the value of state
notice also that some parameters have integer values and some are strings. most of the parameters that are strings are limited to true/false, or up/down, etc.....
I'd like to have a realtime chart/display that is updated once/interval I choose.
for the parameters that have string values, it's OK to translate those to a numerical or color representation for display
I'm trying to read and understand how to use the chart command, but I'm having a hard time translating the "syntax" descriptions to "real life"....
I'd appreciate some help getting started on my learning curve.
thanks so much
... View more