Virtual machines with high CPU Ready summation value

"CPU Ready" indicates that a virtual machine needs access to CPU resources to continue processing, but the underlying host has no remaining CPU resources to allocate. This metric can be calculated as summation or percentage. You might need to see which virtual machines on your network have a high CPU Ready summation value when doing the following:

• Monitoring VMware virtual machine performance

Prerequisites 

In order to execute this procedure in your environment, the following data, services, or apps are required:

• Virtualization data
• Operating system event data
• Splunk Add-on for VMware

Example

"CPU Ready" only occurs when the host is overprovisioned on CPU. A single virtual machine with high "CPU Ready" indicates a configuration or resource problem, and the virtual machine's performance is impacted. 

NOTE: To optimize the search shown below, you should specify an index and a time range.

1. Run the following search: 

sourcetype="vmware:perf:cpu" source="VMPerf:VirtualMachine" instance=aggregated 
|stats avg(p_summation_cpu_ready_millisecond) AS avg_p_summation_cpu_ready_millisecond BY moid 
|eval is_high_sumready = if(avg_p_summation_cpu_ready_millisecond > 500, "Yes", "No") 
|fields moid avg_p_summation_cpu_ready_millisecond is_high_sumready 
|append 
    [ search index=<your index name> sourcetype="vmware:inv:hierarchy" type=VirtualMachine 
    |dedup moid 
    |eval esxi_moid = 'changeSet.runtime.host.moid' 
    |table moid esxi_moid] 
|eventstats values(esxi_moid) AS esxi_moid BY moid 
|search is_high_sumready=”Yes” 
|sort - avg_p_summation_cpu_ready_millisecond 
|table moid esxi_moid avg_p_summation_cpu_ready_millisecond is_high_sumready

Search explanation

The table provides an explanation of what each part of this search achieves. You can adjust this query based on the specifics of your environment.

Result

The table below shows sample results for the search. Many factors can contribute to high ready times, and referencing other relevant searches, such as ESXi hosts with high CPU Ready summation value, side-by-side on a dashboard can help you better understand the causes.