sourcetype=yarn-nodemanager source=/u/log/hadoop-yarn/hadoop-cmf-yarn-NODEMANAGER-dn* 1447809986734_64769 "Memory usage of ProcessTree" | rex "_(?<container_id>\d+): (?<used_mem>\d+\.\d) (?<used_mem_size>\SB) of (?<total_mem>\d+\.?\d?) (?<total_mem_size>\SB) physical memory used" | eval used_mbytes = if(used_mem_size=="GB", used_mem*1000, used_mem) | appendpipe [     eval total_mbytes = if(total_mem_size=="GB", total_mem*1000, total_mem)     | fields total_mbytes   ] | fields container_id used_mbytes total_mbytes | timechart max(used_mbytes) as "Used Memory (MB)", max(total_mbytes) as "Max Memory (MB)" by container_id limit=200 useother=f