<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Daily Business Hours Apdex Chart in All Apps and Add-ons</title>
    <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Daily-Business-Hours-Apdex-Chart/m-p/212657#M22839</link>
    <description>&lt;P&gt;Hello @kulls,&lt;/P&gt;

&lt;P&gt;Try this, is a working example with metrics.log charting values from previous week.  This is assuming that you have date_* fields in your events, if not let me know.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=_internal source="*metrics.log"  earliest=-1w@w latest=@w
| eval date_hour=strftime(_time, "%H")
| eval date_wday = strftime(_time, "%w")
| search date_hour&amp;gt;=8 date_hour&amp;lt;=17 date_wday&amp;gt;=1 date_wday&amp;lt;=5
| chart avg(kb) by date_wday
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;STRONG&gt;Edit&lt;/STRONG&gt;: New query, this will work even if you don't have date_* fields and it's easier to understand if you want a montly report,&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=_internal source="*metrics.log"  earliest=-1mon@mon latest=@mon
| eval hour = tonumber(strftime(_time,"%H"))
| eval wday = tonumber(strftime(_time,"%w"))
| bin _time span=1d 
| where hour&amp;gt;=8 AND hour&amp;lt;=17 AND wday!=0 AND wday!=6
| eval formatedTime=strftime(_time, "%b %d")
| chart avg(kb) by formatedTime | rename formatedTime AS "Date"
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Hope it helps.&lt;/P&gt;</description>
    <pubDate>Tue, 27 Sep 2016 19:19:57 GMT</pubDate>
    <dc:creator>alemarzu</dc:creator>
    <dc:date>2016-09-27T19:19:57Z</dc:date>
    <item>
      <title>Daily Business Hours Apdex Chart</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Daily-Business-Hours-Apdex-Chart/m-p/212656#M22838</link>
      <description>&lt;P&gt;I have dynatrace apdex score of user satisfaction index. I need take  this score avg by filtering 8 am to 5 pm business hours and draw a chart with the previous day business hour apdex chart. &lt;BR /&gt;
So i would have chart monthly/weekly from Monday to Friday apdex avg only from business hour. how  this is possible to do with splunk.  &lt;/P&gt;</description>
      <pubDate>Sat, 24 Sep 2016 19:44:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Daily-Business-Hours-Apdex-Chart/m-p/212656#M22838</guid>
      <dc:creator>kullss</dc:creator>
      <dc:date>2016-09-24T19:44:13Z</dc:date>
    </item>
    <item>
      <title>Re: Daily Business Hours Apdex Chart</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Daily-Business-Hours-Apdex-Chart/m-p/212657#M22839</link>
      <description>&lt;P&gt;Hello @kulls,&lt;/P&gt;

&lt;P&gt;Try this, is a working example with metrics.log charting values from previous week.  This is assuming that you have date_* fields in your events, if not let me know.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=_internal source="*metrics.log"  earliest=-1w@w latest=@w
| eval date_hour=strftime(_time, "%H")
| eval date_wday = strftime(_time, "%w")
| search date_hour&amp;gt;=8 date_hour&amp;lt;=17 date_wday&amp;gt;=1 date_wday&amp;lt;=5
| chart avg(kb) by date_wday
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;STRONG&gt;Edit&lt;/STRONG&gt;: New query, this will work even if you don't have date_* fields and it's easier to understand if you want a montly report,&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=_internal source="*metrics.log"  earliest=-1mon@mon latest=@mon
| eval hour = tonumber(strftime(_time,"%H"))
| eval wday = tonumber(strftime(_time,"%w"))
| bin _time span=1d 
| where hour&amp;gt;=8 AND hour&amp;lt;=17 AND wday!=0 AND wday!=6
| eval formatedTime=strftime(_time, "%b %d")
| chart avg(kb) by formatedTime | rename formatedTime AS "Date"
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Hope it helps.&lt;/P&gt;</description>
      <pubDate>Tue, 27 Sep 2016 19:19:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Daily-Business-Hours-Apdex-Chart/m-p/212657#M22839</guid>
      <dc:creator>alemarzu</dc:creator>
      <dc:date>2016-09-27T19:19:57Z</dc:date>
    </item>
  </channel>
</rss>

