11metricsWithoutAggs
2- required_capability: metrics_syntax
2+ required_capability: metrics_command
33METRICS k8s | sort @timestamp DESC, cluster, pod | keep @timestamp,cluster,pod,network.bytes_in,network.cost | limit 5;
44
55@timestamp:datetime | cluster:keyword | pod: keyword| network.bytes_in:long | network.cost:double
@@ -11,9 +11,9 @@ METRICS k8s | sort @timestamp DESC, cluster, pod | keep @timestamp,cluster,pod,n
1111;
1212
1313metricsWithAggsAndSourceQuoting
14- required_capability: metrics_syntax
14+ required_capability: metrics_command
1515required_capability: double_quotes_source_enclosing
16- METRICS "k8s" max_bytes=max(to_long(network.total_bytes_in)) BY cluster | SORT max_bytes DESC;
16+ METRICS "k8s" | STATS max_bytes=max(to_long(network.total_bytes_in)) BY cluster | SORT max_bytes DESC;
1717
1818max_bytes:long | cluster: keyword
191910797 | qa
@@ -22,49 +22,49 @@ max_bytes:long | cluster: keyword
2222;
2323
2424maxRateAndSourceTripleQuoting
25- required_capability: metrics_syntax
25+ required_capability: metrics_command
2626required_capability: double_quotes_source_enclosing
27- METRICS """ k8s""" max(rate(network.total_bytes_in, 1minute));
27+ METRICS k8s | STATS max(rate(network.total_bytes_in, 1minute));
2828
2929max(rate(network.total_bytes_in, 1minute)): double
3030790.4235090751945
3131;
3232
3333maxCost
34- required_capability: metrics_syntax
35- METRICS k8s max_cost=max(rate(network.total_cost));
34+ required_capability: metrics_command
35+ METRICS k8s | STATS max_cost=max(rate(network.total_cost));
3636
3737max_cost: double
38380.16151685393258428
3939;
4040
4141maxRateAndBytes
42- required_capability: metrics_syntax
43- METRICS k8s max(rate(network.total_bytes_in, 1minute)), max(network.bytes_in);
42+ required_capability: metrics_command
43+ METRICS k8s | STATS max(rate(network.total_bytes_in, 1minute)), max(network.bytes_in);
4444
4545max(rate(network.total_bytes_in, 1minute)): double | max(network.bytes_in): long
4646790.4235090751945 | 1021
4747;
4848
4949`maxRateAndMarkupBytes`
50- required_capability: metrics_syntax
51- METRICS k8s max(rate(network.total_bytes_in, 1minute)), max(network.bytes_in * 1.05);
50+ required_capability: metrics_command
51+ METRICS k8s | STATS max(rate(network.total_bytes_in, 1minute)), max(network.bytes_in * 1.05);
5252
5353max(rate(network.total_bytes_in, 1minute)): double | max(network.bytes_in * 1.05): double
5454790.4235090751945 | 1072.05
5555;
5656
5757maxRateAndBytesAndCost
58- required_capability: metrics_syntax
59- METRICS k8s max(rate(network.total_bytes_in, 1minute)), max(network.bytes_in), max(rate(network.total_cost));
58+ required_capability: metrics_command
59+ METRICS k8s | STATS max(rate(network.total_bytes_in, 1minute)), max(network.bytes_in), max(rate(network.total_cost));
6060
6161max(rate(network.total_bytes_in, 1minute)): double| max(network.bytes_in): long| max(rate(network.total_cost)): double
6262790.4235090751945 | 1021 | 0.16151685393258428
6363;
6464
6565sumRate
66- required_capability: metrics_syntax
67- METRICS k8s bytes=sum(rate(network.total_bytes_in)), sum(rate(network.total_cost)) BY cluster | SORT cluster;
66+ required_capability: metrics_command
67+ METRICS k8s | STATS bytes=sum(rate(network.total_bytes_in)), sum(rate(network.total_cost)) BY cluster | SORT cluster;
6868
6969bytes: double | sum(rate(network.total_cost)): double | cluster: keyword
707024.49149357711476 | 0.3018995503437827 | prod
@@ -73,17 +73,17 @@ bytes: double | sum(rate(network.total_cost)): double | cluster: keyword
7373;
7474
7575oneRateWithBucket
76- required_capability: metrics_syntax
77- METRICS k8s max(rate(network.total_bytes_in)) BY time_bucket = bucket(@timestamp,5minute) | SORT time_bucket DESC | LIMIT 2;
76+ required_capability: metrics_command
77+ METRICS k8s | STATS max(rate(network.total_bytes_in)) BY time_bucket = bucket(@timestamp,5minute) | SORT time_bucket DESC | LIMIT 2;
7878
7979max(rate(network.total_bytes_in)): double | time_bucket:date
808010.594594594594595 | 2024-05-10T00:20:00.000Z
818123.702205882352942 | 2024-05-10T00:15:00.000Z
8282;
8383
8484twoRatesWithBucket
85- required_capability: metrics_syntax
86- METRICS k8s max(rate(network.total_bytes_in)), sum(rate(network.total_bytes_in)) BY time_bucket = bucket(@timestamp,5minute) | SORT time_bucket DESC | LIMIT 3;
85+ required_capability: metrics_command
86+ METRICS k8s | STATS max(rate(network.total_bytes_in)), sum(rate(network.total_bytes_in)) BY time_bucket = bucket(@timestamp,5minute) | SORT time_bucket DESC | LIMIT 3;
8787
8888max(rate(network.total_bytes_in)): double | sum(rate(network.total_bytes_in)): double | time_bucket:date
898910.594594594594595 | 42.70864495221802 | 2024-05-10T00:20:00.000Z
@@ -93,8 +93,8 @@ max(rate(network.total_bytes_in)): double | sum(rate(network.total_bytes_in)): d
9393
9494
9595oneRateWithBucketAndCluster
96- required_capability: metrics_syntax
97- METRICS k8s max(rate(network.total_bytes_in)) BY time_bucket = bucket(@timestamp,5minute), cluster | SORT time_bucket DESC, cluster | LIMIT 6;
96+ required_capability: metrics_command
97+ METRICS k8s | STATS max(rate(network.total_bytes_in)) BY time_bucket = bucket(@timestamp,5minute), cluster | SORT time_bucket DESC, cluster | LIMIT 6;
9898
9999max(rate(network.total_bytes_in)): double | time_bucket:date | cluster: keyword
10010010.594594594594595 | 2024-05-10T00:20:00.000Z | prod
@@ -106,8 +106,8 @@ max(rate(network.total_bytes_in)): double | time_bucket:date | cluster:
106106;
107107
108108BytesAndCostByBucketAndCluster
109- required_capability: metrics_syntax
110- METRICS k8s max(rate(network.total_bytes_in)), max(network.cost) BY time_bucket = bucket(@timestamp,5minute), cluster | SORT time_bucket DESC, cluster | LIMIT 6;
109+ required_capability: metrics_command
110+ METRICS k8s | STATS max(rate(network.total_bytes_in)), max(network.cost) BY time_bucket = bucket(@timestamp,5minute), cluster | SORT time_bucket DESC, cluster | LIMIT 6;
111111
112112max(rate(network.total_bytes_in)): double | max(network.cost): double | time_bucket:date | cluster: keyword
11311310.594594594594595 | 10.75 | 2024-05-10T00:20:00.000Z | prod
@@ -119,8 +119,8 @@ max(rate(network.total_bytes_in)): double | max(network.cost): double | time_buc
119119;
120120
121121oneRateWithBucketAndClusterThenFilter
122- required_capability: metrics_syntax
123- METRICS k8s max(rate(network.total_bytes_in)) BY time_bucket = bucket(@timestamp,5minute), cluster | WHERE cluster=="prod" | SORT time_bucket DESC | LIMIT 3;
122+ required_capability: metrics_command
123+ METRICS k8s | WHERE cluster=="prod" | STATS max(rate(network.total_bytes_in)) BY time_bucket = bucket(@timestamp,5minute), cluster | SORT time_bucket DESC | LIMIT 3;
124124
125125max(rate(network.total_bytes_in)): double | time_bucket:date | cluster: keyword
12612610.594594594594595 | 2024-05-10T00:20:00.000Z | prod
0 commit comments