Hi Splunkers,
We are evaluating moving to metrics events for our existing apps. In our apps, we have to display the latest value of the corresponding tag by time.
From documentation, we find that we might not be able to do it
Source: https://docs.splunk.com/Documentation/Splunk/7.0.1/Metrics/Search
1. You cannot search metrics data for individual metric events.
2. You cannot use automatic lookups with metrics data. This is because automatic lookups are applied to individual events, whereas metrics are analyzed as an aggregate.
Please suggest if there are any work-arounds.
mstats
allows the use of the latest
function, which seems like it would give you what you’re looking for.