Device_Name="* *" OR Device_Name Device_Name index="idx_tic_spectrum_dev" in_bitrate=* | rex Field=Model_Name "(?<Device_Name>.*)_(?<Interface_Name>[A-Za-z0-9/]{0,8}[0-9])" | table Device_Name | dedup Device_Name | sort Device_Name -15m now
index="idx_tic_spectrum_dev" in_bitrate=* | dedup Model_Name | rex Field=Model_Name "(?<Device_Name>.*)_(?<Interface_Name>[A-Za-z0-9/]{0,8}[0-9])" | search $devices$ | lookup network_link.csv name_a AS Device_Name int_a AS Interface_Name OUTPUTNEW name_b AS Neighbor | lookup ospf_link.csv name_a AS Device_Name int_a AS Interface_Name OUTPUTNEW name_b AS Neighbor | table Model_Name Device_Name Neighbor in_bitrate out_bitrate | eval indice = mvrange(0,2,1) | mvexpand indice | eval from = if(indice=0,Device_Name,Neighbor) | eval to = if(indice=0,Neighbor,Device_Name) | eval good = if(indice=0,out_bitrate,in_bitrate) | stats avg(good) as good by from to | eval labely = if(from<to,5,-5) | eval label = "bw : "+good -15m now