[itsi-cp-nix-indexes]
definition = index=os

[monitoring_unix_cpu_wrapper]
definition = `monitoring_unix_cpu_recommended`
iseval = 0

[monitoring_unix_cpu_events]
definition = search `itsi-cp-nix-indexes` source=cpu CPU=all
iseval = 0

[monitoring_unix_cpu_recommended]
definition = mstats latest(cpu_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype=cpu_metric CPU=all by host span=30s
iseval = 0

[monitoring_unix_cpu_mixed_mode_TRUNCATED_RESULTS]
definition = union \
[ search `itsi-cp-nix-indexes` source=cpu CPU=all] \
[|mstats latest(cpu_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype=cpu_metric CPU=all by host span=30s]
iseval = 0

[monitoring_unix_df_wrapper]
definition = `monitoring_unix_df_recommended`
iseval = 0

[monitoring_unix_df_events]
definition = search `itsi-cp-nix-indexes` source=df Type!=nfs*\
    | where NOT match(FreeMBytes,"unknown")\
    | eval FreePct-{MountedOn}=PercentFreeSpace\
    | eval FreeMB-{MountedOn}=FreeMBytes\
    | eval FreeMB-Other=if(in(MountedOn,"/","/opt","/boot"),null(), FreeMBytes)\
    | eval FreePct-Other=if(in(MountedOn,"/","/opt","/boot"),null(), PercentFreeSpace)
iseval = 0

[monitoring_unix_df_recommended]
definition = mstats latest(df_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype=df_metric Type!=nfs* by host, MountedOn span=30s\
    | eval FreePct-{MountedOn}=100-UsePct\
    | eval FreeMB-{MountedOn}=round(Avail_KB/1024,1)\
    | eval FreeMB-Other=if(in(MountedOn,"/","/opt","/boot"),null(), round(Avail_KB/1024,1))\
    | eval FreePct-Other=if(in(MountedOn,"/","/opt","/boot"),null(), 100-UsePct)
iseval = 0

[monitoring_unix_df_mixed_mode_TRUNCATED_RESULTS]
definition = union\
    [ search `itsi-cp-nix-indexes` source=df Type!=nfs*\
    | where NOT match(FreeMBytes,"unknown")\
    | eval FreePct-{MountedOn}=PercentFreeSpace\
    | eval FreeMB-{MountedOn}=FreeMBytes\
    | eval FreeMB-Other=if(in(MountedOn,"/","/opt","/boot"),null(), FreeMBytes)\
    | eval FreePct-Other=if(in(MountedOn,"/","/opt","/boot"),null(), PercentFreeSpace)]\
    [| mstats latest(df_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype=df_metric Type!=nfs* by host, MountedOn span=30s\
    | eval FreePct-{MountedOn}=100-UsePct\
    | eval FreeMB-{MountedOn}=round(Avail_KB/1024,1)\
    | eval FreeMB-Other=if(in(MountedOn,"/","/opt","/boot"),null(), round(Avail_KB/1024,1))\
    | eval FreePct-Other=if(in(MountedOn,"/","/opt","/boot"),null(), 100-UsePct)]
iseval = 0

[monitoring_unix_iostat_wrapper]
definition = `monitoring_unix_iostat_recommended`
iseval = 0

[monitoring_unix_iostat_events]
definition = search `itsi-cp-nix-indexes` sourcetype=iostat | eval hostdev=host.":".Device
iseval = 0

[monitoring_unix_iostat_recommended]
definition = mstats latest(iostat_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype="iostat_metric" by host, Device span=30s\
    | eval hostdev=host.":".Device
iseval = 0

[monitoring_unix_iostat_mixed_mode_TRUNCATED_RESULTS]
definition = union\
    [ search `itsi-cp-nix-indexes` sourcetype=iostat\
    | eval hostdev=host.":".Device]\
    [| mstats latest(iostat_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype="iostat_metric" by host, Device span=30s\
    | eval hostdev=host.":".Device]
iseval = 0

[monitoring_unix_vmstat_wrapper]
definition = `monitoring_unix_vmstat_recommended`
iseval = 0

[monitoring_unix_vmstat_events]
definition =  search `itsi-cp-nix-indexes` source=vmstat
iseval = 0

[monitoring_unix_vmstat_recommended]
definition = mstats latest(vmstat_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype="vmstat_metric" by host span=30s
iseval = 0

[monitoring_unix_vmstat_mixed_mode_TRUNCATED_RESULTS]
definition = union\
    [ search `itsi-cp-nix-indexes` source=vmstat]\
    [| mstats latest(vmstat_metric.*) AS * where `itsi_entity_type_ta_nix_metrics_indexes` sourcetype="vmstat_metric" by host span=30s]
iseval = 0