Getting Data In

metrics - individual events

ykpramodhcbt
Path Finder

Hi Splunkers,

We are evaluating moving to metrics events for our existing apps. In our apps, we have to display the latest value of the corresponding tag by time.

From documentation, we find that we might not be able to do it
Source: https://docs.splunk.com/Documentation/Splunk/7.0.1/Metrics/Search

1. You cannot search metrics data for individual metric events. 
2. You cannot use automatic lookups with metrics data. This is because automatic lookups are applied to individual events, whereas metrics are analyzed as an aggregate.

Please suggest if there are any work-arounds.

0 Karma

micahkemp
Champion

mstats allows the use of the latest function, which seems like it would give you what you’re looking for.

Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...