Dashboards & Visualizations

display field values over the chart.

senthamilselvan
Engager

Hi Team,
I have create a dashboard for Disk utilization. I have 2 multi select option to display the server name and file systems in the servers. i have to select server name and the file system to get the file system utilization.
Our requirement is , we have one more field name called file system type(nfs3,jfs2,mmfs). when i filter the data in the dashboard, for example. I selected one server(Server A) and select one file system (FS A) and the graph will display the data utilization. I have attached dashboard sample for reference.alt text

As i mentioned over the line(jfs2,nfs2), i have to populate the value when i select any file system from the drop down.

Please let me know for any other information.

Tags (1)
0 Karma

sandyIscream
Communicator

Could you please try the below query:

index=nix-os sourcetype=cpu | chart span=5m avg(PercentIdleTime) as IdleTime avg(PercentSystemTime) as SystemTime avg(PercentUserTime) as UserTime avg(PercentWaitTime) as WaitTime over $host$ by $cpu$

0 Karma

adonio
Ultra Champion

can you share the query?
does your search / query ends with a "by" statment?
for example:
index=index sourcetype=sourcetype | timechart latest(disk) as "disk utilization(%)" by mounted on
or use the tokens from inputs as the by clause

hope it helps

0 Karma

senthamilselvan
Engager

Hi Adonio,

the below is my search query.
index=nix-os sourcetype=cpu | search host IN ( $selecthost$ ) cpu IN ($selectcpu$) | fields host cpu $selectfield$ | eval host_cpu="Host:"+host+"-CPU:"+cpu
| timechart span=5m avg(PercentIdleTime) as IdleTime avg(PercentSystemTime) as SystemTime avg(PercentUserTime) as UserTime avg(PercentWaitTime) as WaitTime by host_cpu

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...