Top Header cpu & memory status

I didn’t like the CPU input from the Splunk TA Nix app, so I created this small ingest from top. The script takes a snapshot of the top command, and looks directly at the header:

and comes back with the first 5 lines of Top:
and the following query pulls CPU load average data
while the following query pulls the memory data
Share This:

Leave A Comment?