06-26-2023 02:46 AM
I'm trying to modify some reports filtering results by extensible attributes or specific grid member.
Example of " CPU Utilization Trend (Detailed)":
sourcetype=ib:system index=ib_system " 1 " | bucket span=1m _time | timechart bins=1000 avg(CPU_PERCENT) by host where max in top5 useother=f | interpolate 120
Now the report shows only top5 but I would like to see only all the GRID member with "site=EMEA" (foe example) as extensible attribut.
Also, I would like to understand how to see same results for a specific member or multiple name member.
I tried to change it myself also with doumentation but I was not able to find teh solution, have someone of you already changed search for members matching extensible attributes?