i want to find out the maximum CPU utilization reached by the server "xyz" in last one month
You only provided little detail, so you'll have to adapt this to your data:
index=yourindex sourcetype=yoursourcetype
| timechart span=1mon max(yourfield) by host
Hope that helps - if it does I'd be happy if you would upvote/accept this answer, so others could profit from it. 🙂
Since he is looking for max in last month, a simple | stats max(yourfield) by host
would do right (and then use the timepicker to run that over the desired timerange)?
Yeah, I thought it might be useful to have a comparison handy, but that might actually be enough 😉
Please add some details: Do you already have that data? Is it Windows, Linux.... like, basics. 😉
its an unix box and also these servers are getting monitored in splunk and also CPU,memory,disk is getting monitored to trigger an alert of it is crossing 70%
but here they want to see the maximum range host has reached in last month