Hi Splunk Experts,
Currently I am creating a dashboard panel wherein I have to filter the results in my table based on its value.
For example, if the value reaches above 100, it should not be displayed in the table.
What happens is, once the value reaches above 100, the last value is retained.
I expect it to disappear because it does not meet the value limit.
Here is what I have done so far:
counter="*" index=* | where NOT Value > 100 | sort -_time
Thanks!
... View more
Hi Splunk Experts,
I would like to ask, if there's a way to measure the data size (in bytes) for each counter? For example, in the object, Memory, there are 34 events, is there a way to measure how much bytes do each counter (e.g., Available MBytes, Cache Bytes, Cache Bytes Peak) have?
Thanks!
... View more