Hello Splunkers,
Here's a simple Scenario:
Entities: webserver1, webserver2, webserver3, webserver4
Service: Infra
KPIs under the Service: CPU Util, and Memory Util. (2 KPIs only using the 4 entities)
Glass Table: Infra Diagram - 4 webservers must show the 4 CPU Util and 4 Memory Util.
What I did:
Since KPIs can only be rolled-out on Glass Table as whole, I opted to use an "Ad Hoc" search (the "at search time" KPI with no backfill) similar to the KPI and copied the threshold of KPI to show the 4 CPUs on the Glass Table.
I have no problem in Deep DIve since you can break down the entities into Lanes for visual representation since the aggregated Lane with 4 entities is kind of crowded to see already, what more if you have 10-20 entities.
Question:
Is there a best practice in performing this kind of scenario? Because it looks like there's no other way. What I wanted to achieve is similar to the Deep Dive which you can break down the main KPI and spread it across the Glass Table. And a side question btw, what's the KPI limit or best practice in measuring when to stop adding KPIs.
There's little to no documentation regarding deployments using ITSI and best practices in line with real life scenarios.
Thank you and regards,
Lloyd
Note:
Entities must be used on the KPI.
Did some KPIs with no entities and solves the problem but with the expense of another KPIs which defeats the purpose of Entity
↧