![]() | mstats count where index=mymetricsdata metric_name= ![]() | mstats count where metric_name=* span=10s BY metric_name To list counts of metric names over 10-second intervals: To list all dimensions in all metrics indexes: | mcatalog values(metric_name) WHERE index=* To list all metric names in all metrics indexes: This means, for example, that metrics search commands treat the following as three distinct metrics: cap.gear, CAP.GEAR, and Cap.Gear. Dimensions that start with underscore ( _ ) are not indexed, so they are not searchable.Īs of release 8.0.0 of the Splunk platform, metrics indexing and search is case sensitive.For example, if a dimension name is "host", search for "extracted_host" to find it. However, when extracted dimension names are reserved names, the name is prefixed with "extracted_" to avoid name collision. You can use reserved fields such as "source", "sourcetype", or "host" as dimensions.You can enrich metrics with the equivalent of custom indexed fields, which are treated as dimensions.You cannot perform search-time extractions.This is because automatic lookups are applied to individual events, whereas metrics are analyzed as an aggregate. You cannot use automatic lookups with metrics data.Other search commands do not work with a metrics index. See mcatalog in the Search Reference manual. To enumerate metric names, dimensions, and values, use mcatalog, which is an internal search command. See mcollect and meventcollect in the Search Reference manual. To convert log events to metric data points at search time and write those metric data points to a metrics index, use the mcollect or meventcollect commands. See mpreview in the Search Reference manual. The mpreview command is a tool for the onboarding and troubleshooting of metrics data and the exploration of metrics indexes. To search on individual metric data points at smaller scale, free of mstats aggregation, use the mpreview command. See mstats in the Search Reference manual. Using mstats you can apply metric aggregations to isolate and correlate problems from different data sources. To analyze data in a metrics index, use mstats, which is a reporting command.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |