@@ -127,3 +127,31 @@ max(rate(network.total_bytes_in)):double | time_bucket:datetime | cluster:ke
12712711.860805860805861 | 2024-05-10T00:15:00.000Z | prod
12812811.562737642585551 | 2024-05-10T00:10:00.000Z | prod
129129;
130+
131+
132+ oneRateWithBucketAndClusterThenFilter
133+ required_capability: metrics_command
134+ TS k8s | WHERE cluster=="prod" | STATS max(rate(network.total_bytes_in)) BY time_bucket = bucket(@timestamp,5minute), cluster | SORT time_bucket DESC | LIMIT 3;
135+
136+ max(rate(network.total_bytes_in)):double | time_bucket:datetime | cluster:keyword
137+ 6.980660660660663 | 2024-05-10T00:20:00.000Z | prod
138+ 11.860805860805861 | 2024-05-10T00:15:00.000Z | prod
139+ 11.562737642585551 | 2024-05-10T00:10:00.000Z | prod
140+ ;
141+
142+ notEnoughSamples
143+ required_capability: metrics_command
144+ TS k8s | WHERE @timestamp <= "2024-05-10T00:06:14.000Z" | STATS max(rate(network.total_bytes_in)) BY pod, time_bucket = bucket(@timestamp,1minute) | SORT pod, time_bucket DESC | LIMIT 10;
145+
146+ max(rate(network.total_bytes_in)):double | pod:keyword | time_bucket:datetime
147+ null | one | 2024-05-10T00:06:00.000Z
148+ 0.075 | one | 2024-05-10T00:05:00.000Z
149+ null | one | 2024-05-10T00:04:00.000Z
150+ 16.45 | one | 2024-05-10T00:03:00.000Z
151+ null | one | 2024-05-10T00:01:00.000Z
152+ null | three | 2024-05-10T00:06:00.000Z
153+ null | three | 2024-05-10T00:05:00.000Z
154+ 1.534413580246913 | three | 2024-05-10T00:03:00.000Z
155+ null | three | 2024-05-10T00:02:00.000Z
156+ null | three | 2024-05-10T00:01:00.000Z
157+ ;
0 commit comments