Splunk Operational Intelligence Cookbook - Third Edition

How to do it...

Follow these steps to create an area chart of application's functional statistics:

1. Log in to your Splunk server.
2. Select the default Search & Reporting application.
3. Ensure that the time range picker is set to Last 24 hours, and type the following search into the Splunk search bar. Then, click on Search or hit Enter:

index=main sourcetype=log4j | eval  mem_used_MB=(mem_used/1024)/1024 | eval  mem_total_MB=(mem_total/1024)/1024 | timechart span=1m  values(mem_total_MB) AS Total_Mem_Avail_MB, count AS  Total_Calls, avg(mem_used_MB) AS Avg_Mem_Used_MB,  avg(response_time) AS Avg_Response_Time

4. Splunk will return a time series chart of values for the total memory available represented in megabytes, a count of the total function ...