Splunk IT Service Intelligence

Graph of multiple metric_names

terpdog
Explorer

I have about 100 different metrics_names and I'd like to be able to

  1. Get the metric_name
  2. Plot that metric_name over time

I have about 100 hosts and they all have a metric rack_number and serial_number.

The 100 hosts I don't care about but I want to plot every single metric where rack_number=1 and serial_number=12345 and take a look at it.

Labels (2)
0 Karma

terpdog
Explorer

I think I may have answered my own question

|mstats avg(_value) as latest_value span=15m WHERE metric_name=* index=* rack_number=1 serial_number=12345 by metric_name
|where latest_value > 10000
|timechart span=15m avg(latest_value) by metric_name limit=0

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...