Hi Team,
I have create a dashboard for Disk utilization. I have 2 multi select option to display the server name and file systems in the servers. i have to select server name and the file system to get the file system utilization.
Our requirement is , we have one more field name called file system type(nfs3,jfs2,mmfs). when i filter the data in the dashboard, for example. I selected one server(Server A) and select one file system (FS A) and the graph will display the data utilization. I have attached dashboard sample for reference.
As i mentioned over the line(jfs2,nfs2), i have to populate the value when i select any file system from the drop down.
Please let me know for any other information.
Could you please try the below query:
index=nix-os sourcetype=cpu | chart span=5m avg(PercentIdleTime) as IdleTime avg(PercentSystemTime) as SystemTime avg(PercentUserTime) as UserTime avg(PercentWaitTime) as WaitTime over $host$ by $cpu$
can you share the query?
does your search / query ends with a "by" statment?
for example:
index=index sourcetype=sourcetype | timechart latest(disk) as "disk utilization(%)" by mounted on
or use the tokens from inputs as the by clause
hope it helps
Hi Adonio,
the below is my search query.
index=nix-os sourcetype=cpu | search host IN ( $selecthost$ ) cpu IN ($selectcpu$) | fields host cpu $selectfield$ | eval host_cpu="Host:"+host+"-CPU:"+cpu
| timechart span=5m avg(PercentIdleTime) as IdleTime avg(PercentSystemTime) as SystemTime avg(PercentUserTime) as UserTime avg(PercentWaitTime) as WaitTime by host_cpu