Refine your search:

I am monitoring the CPU use of the Splunk UF using WMI on my windows systems I have this search;

source="WMI:LocalProcesses" Name=splunkd host="SYS20"| bucket _time span=1h | stats avg(PercentProcessorTime) AS "Average % CPU" by _time

this lets me see the Splunk UF CPU use over time for "sys20"

I can make this a dashboard without a problem.

My question is how do I make a dashboard with a pull-down list of "system names" and "Search time" so that I can make the dashboard available for system owners so they can see how much of the CPU resource Splunk is using on there system.

I have been using Splunk for 1 1/2 years and am at version 4.3 but I am not a developer.

Any help would be great.

asked 20 Jan '12, 07:40

hartfoml's gravatar image

hartfoml
2251219
accept rate: 36%


One Answer:

You need to make a form instead of a dashboard. Oddly enough, I've started building almost the exact form you are, except I ran into a problem using the radial gauge. You can borrow my code and use it as a template, I posted it here: Radial gauge not showing in form on Splunk Answers All you need to do is add the time selection to the fieldset section, and of course, change the queries to match what you want.

Everything there works except for the gauge.

link

answered 20 Jan '12, 11:46

stjack99's gravatar image

stjack99
85118
accept rate: 40%

Thanks I really appreciate the help

Now I need to read up on how to implement forms

I got you code. I'll let you know if I can figure out how to implement it.

Mike H.

(20 Jan '12, 11:55) hartfoml
Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×81

Asked: 20 Jan '12, 07:40

Seen: 697 times

Last updated: 20 Jan '12, 11:55

Copyright © 2005-2012 Splunk Inc. All rights reserved.