Hello everyone.
Want to display the output only for the time which crosses 18 months (earliest time)
This is an intensely broad and tricky problem. Here is some stuff to try:
https://answers.splunk.com/answers/511894/how-to-use-the-timewrap-command-and-set-an-alert-f.html
https://splunkbase.splunk.com/app/4375/
I am not yure if anyone might be able to help you here...
We don't know
- which metrics are you collecting
- What are the requirements
- What is the capacity of the measured system
- What should be alerted/notified
- ....
I guess you need someone who is able to tell the meaning of these numbers, this has to be someone of the respective business unit running the measured device.