Skip to content

Instantly share code, notes, and snippets.

@faststeak
Last active November 1, 2017 19:42
Show Gist options
  • Save faststeak/6da3d1e4c28215599a2826670a12dcb2 to your computer and use it in GitHub Desktop.
Save faststeak/6da3d1e4c28215599a2826670a12dcb2 to your computer and use it in GitHub Desktop.
Splunk - Average events per second for a specific host
index=_internal source=*metrics.log earliest=-1h group=per_host_thruput series="<your_host>" component=Metrics
| timechart span=1m avg(eps) as avg_eps
# Another try:
| metasearch index=<your_index> host=<your host> | streamstats count as s_count time_window=1m | timechart span=1m@m avg(s_count) as avg_count
@faststeak
Copy link
Author

Interesting for a flaky data source.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment