Skip to content

Instantly share code, notes, and snippets.

@tfhartmann

tfhartmann/splunktalk_predict.md

Created September 25, 2013 14:21
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tfhartmann/6700341 to your computer and use it in GitHub Desktop.
Save tfhartmann/6700341 to your computer and use it in GitHub Desktop.
Download ZIP
Searches from Splunk Talk
Raw
splunktalk_predict.md

This is search we use to try and product future Splunk Throughput

`index_usage_macro` | bucket _time span=1d | stats sum(kb) as kb by series, _time | timechart span=1d per_day(eval(kb/1024/1024)) as GB | predict upper95=High lower95=low future_timespan=180 algorithm=LLT GB as "Predicted"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment