About manapuna

manapuna · ‎05-19-2020

I changed the question a bit. ... | stats count by host output H1 200 H2 340 H3 400 H4 250 The count of each host is different. How would you eval min_value and max_value of these host counts?

manapuna · ‎05-19-2020

mmm.. It didn't do it. Let me ask the question in different way. Lets forget about CPU. Lets say each host is giving you count of sessions or count of traffic. index=app | stats count by host result based on 4 host How would you find max count out of 4 host

manapuna · ‎05-18-2020

I have four hosts. H1, H2, H3, H4 each host have cpu_load I want to find min cpu_load and max cpu_load. Find the min/max out of all host. In My scenario out of 4 host, find the min/max. | stats min(host of cpu_load) as Min, max(host of cpu_load) | eval diff=max-min | alert based on diff Any help is appreciated. Thank you

manapuna · ‎08-11-2019

My search query only good if I am inspecting the graph. I don't think its good enough to alert. My thought process is.. I want to compare the server whose take most traffic and the server who takes lesser traffic.. then alert of the base of that. s1 = 100 s2 = 109 s3 = 100 s4 = 110 S5 = 23 In this case.. I want an alert because S5 is taking very less traffic compare to S4 (Max traffic).

manapuna · ‎08-11-2019

I have 10 servers for my X applications. Sometime 1 or 2 servers will start to take 10% (or < 25%) where other 8 servers are taking normal traffic. How can I set up an alert in such scenario. application=X host=websphere* source=X_performance.log "New Session logged in" | timechart span=1m count by host I can identify 1 or 2 servers take low traffic. Not too sure how can I set this into alert. Thanks,

manapuna · ‎04-06-2018

I am creating a dashboard with 20 panels. I am sending these reports as PDF delivery. More than half of the panels have 0 results, is it anyway I can avoid 0 result panels in the report. Really appreciate the help. Thanks,

manapuna · ‎04-06-2018

thank you. This is what I wanted.

manapuna · ‎04-05-2018

basic search | timechart span = 5m count by host | where count > 3 for today 10% of the time,the count is greater than 3. I only want those rows to display. Please and thank you.

manapuna · ‎01-28-2018

Thank you. Yours is good.

manapuna · ‎01-27-2018

I thought about doing two reports. Thanks,

manapuna · ‎01-26-2018

host=somehost sourcetype=somesource earliest=@d+9h latest=now| timechart span=15m dc(UserId) | appendcols [search host=somehost sourcetype=somesource earliest=-d@d+9h latest=now-d@d| timechart span=15m dc(UserId)] I know I got the syntax wrong here => latest=now-d@d My report is running every 15min Mon-Fri. */15 * * * 1-5 I want to display today's values vs Yesterdays value. If Today is Monday, then Yesterday should be Friday for any other days Today should be comparing with previous days. Since Today is Monday, yesterday is weekend. I only want weekdays. I seen similar example but not what I am looking for. Since I am using now as latest - some time I am getting my 15min reports in two line. Is there anyway we can make sure we only one one line of answer. Thanks in advance.

manapuna · ‎01-18-2018

I want to read specific string between 9:15-9:45, each day for last 7 days. host=manana string | stats dc(count) Thanks,

Posts	12
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎01-18-2018

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

Find the max and min cpu per host

How to identify slowest traffic on a host

Avoid panels on the dashboard

Avoid rows less than certain number of alerts

Compare data from Yesterday and today without Week...

I want to ready value on specific time for last on...

Re: Find the max and min cpu per host