- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
DNS Cache hit ratio (CHR) per DNS view
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
05-10-2017 02:25 AM
Quite often, we see grid configuration with multiple DNS views, so how to report on DNS Cache hit ratio (CHR) per DNS view? Here it is:
sourcetype=ib:dns:query:cache_hit_rate index=ib_dns | eval PERCENT=if(HITS+MISSES > 0,(HITS*100/(HITS+MISSES)),0) | bucket span=10m _time | timechart bins=1000 avg(PERCENT) as CHR by display_name | interpolate 1200
Re: DNS Cache hit ratio (CHR) per DNS view
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
09-19-2018 05:51 AM
What would the querry look like if I wanted to check the CHR for different members on the same graph?
Thanks
Re: DNS Cache hit ratio (CHR) per DNS view
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
09-19-2018 06:03 AM
Hi Shamir,
Here you are:
sourcetype=ib:dns:query:cache_hit_rate index=ib_dns | eval PERCENT=if(HITS+MISSES > 0,(HITS*100/(HITS+MISSES)),0) | eval host_view = host." ".display_name | bucket span=10m _time | timechart bins=1000 avg(PERCENT) as CHR by host_view | interpolate 1200
Re: DNS Cache hit ratio (CHR) per DNS view
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
09-25-2018 12:56 AM
Thank you! That was very helpful.