With the following search
index=msperf sourcetype="perfmon_processor_xml"
| xpath outfield=Architecture "//COMMAND/RESULTS/CIM/INSTANCE/PROPERTY"
| mvexpand Architecture
| rex field=Architecture "^[^=\n]*=\"(?P[^\"]+)[^=\n]*=\"(?P[^\"]+)[^<\n]*<\w+>(?P[^<]+)"
| table PropertyName PropertyValue
| where PropertyName in ( "Description", "DeviceID", "Name", "NumberOfCores", "NumberOfLogicalProcessors")
| dedup PropertyValue
| sort PropertyName PropertyValue
I've got the following result:
PropertyName PropertyValue
Description Intel64 Family 6 Model 45 Stepping 7
DeviceID CPU0
DeviceID CPU1
Name Intel(R) Xeon(R) CPU E5-2643 0 @ 3.30GHz
NumberOfCores 6
and I would like to convert to the following format:
DeviceID Description Name NumberOfCores
CPU0 Intel64 Family 6 Model 45 Stepping 7 Intel(R) Xeon(R) CPU E5-2643 0 @ 3.30GHz 6
CPU1 Intel64 Family 6 Model 45 Stepping 7 Intel(R) Xeon(R) CPU E5-2643 0 @ 3.30GHz 6
Help please?
↧