I am looking to create a simple multiline graph from the following logs:
Hostname=host1 cpu_percentage=X etc..
Hostname=host2 cpu_percentage=Y etc..
Hostname=host3 cpu_percentage=Z etc..
Basically looking for a timechart of cpu_percentage by Hostname over time. I have tried searching for a simple example similar to this but cannot seem to find anything. I tried using this:
search>sourcetype=performance_logs | table _time,Hostname,cpu_percentage
Is what I am looking to do possible or will I need to overlay each graph separately?
Thank you for your time,
sourcetype=performance_logs | timechart avg(cpu_percentage) by Hostname