{ "alert_lag": 30, "alert_period": "5", "base_search": "| mstats avg(\"container_cpu_utilization\") as k8s_cpu_utilization, avg(\"pod_network_receive_errors_total\") as k8s_network_rx_errors, avg(\"pod_network_transmit_errors_total\") as k8s_network_tx_errors, sum(\"container.memory.usage\") as k8s_memory_usage, sum(\"kubernetes.container_memory_limit\") as k8s_memory_limit, where `itsi-cp-observability-indexes` AND (cluster=* OR kubernetes_cluster=*) AND k8s.pod.name=* by kubernetes_cluster, k8s.pod.name span=15m | eval k8s_memory_utilization = (k8s_memory_usage / k8s_memory_limit)*100 | table _time, kubernetes_cluster, k8s.pod.name, k8s_cpu_utilization, k8s_memory_usage, k8s_memory_limit, k8s_memory_utilization, k8s_network_rx_errors, k8s_network_tx_errors", "description": "KPIs for Kubernetes Pods", "entity_filter_field": "host", "entity_split_field": "k8s.pod.name", "is_filter_entities_to_service": false, "is_split_by_entity": true, "key": "da-itsi-cp-splunk-observability-sim-kubernetes", "metric_qualifier": "", "metrics": [ { "aggregate_statop": "avg", "entity_statop": "avg", "fill_gaps": "null_value", "gap_custom_alert_value": "0", "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "key": "cpu-utilization", "threshold_field": "k8s_cpu_utilization", "title": "CPU Utilization", "unit": "%" }, { "aggregate_statop": "avg", "entity_statop": "avg", "fill_gaps": "null_value", "gap_custom_alert_value": "0", "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "key": "memory-utilization", "threshold_field": "k8s_memory_utilization", "title": "Memory Utilization", "unit": "%" }, { "aggregate_statop": "avg", "entity_statop": "avg", "fill_gaps": "null_value", "gap_custom_alert_value": "0", "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "key": "network-rx-errors", "threshold_field": "k8s_network_rx_errors", "title": "Network Rx Errors", "unit": "" }, { "aggregate_statop": "avg", "entity_statop": "avg", "fill_gaps": "null_value", "gap_custom_alert_value": "0", "gap_severity": "unknown", "gap_severity_color": "#CCCCCC", "gap_severity_color_light": "#EEEEEE", "gap_severity_value": "-1", "key": "network-tx-errors", "threshold_field": "k8s_network_tx_errors", "title": "Network Tx Errors", "unit": "" } ], "search_alert_earliest": "15", "title": "SIM_kubernetes", "version": "0.0.38" }