https://community.splunk.com/t5/Getting-Data-In/How-to-search-the-average-duration-of-REST-API-calls-taken-by/m-p/173976#M35014 <PRE><CODE>2015-08-13 22:23:10,530 UNKNOWN_USER [WebContainer : 9] INFO - End : Duration= 000322 CPU elapsed= 70.987723 - service: /AX_IServicesRESTAPI_v1 </CODE></PRE> <P>I have 7 hosts and the REST API service runs on all the 7 nodes. I need to figure out the average duration of the REST API calls taken by each node and the average CPU elapsed time.</P> <P>How can I group by RESTAPI_V1 by host to calculate average duration and CPU elapsed?</P> Fri, 14 Aug 2015 02:32:08 GMT diva_thilak 2015-08-14T02:32:08Z https://community.splunk.com/t5/Getting-Data-In/How-to-search-the-average-duration-of-REST-API-calls-taken-by/m-p/173976#M35014 <PRE><CODE>2015-08-13 22:23:10,530 UNKNOWN_USER [WebContainer : 9] INFO - End : Duration= 000322 CPU elapsed= 70.987723 - service: /AX_IServicesRESTAPI_v1 </CODE></PRE> <P>I have 7 hosts and the REST API service runs on all the 7 nodes. I need to figure out the average duration of the REST API calls taken by each node and the average CPU elapsed time.</P> <P>How can I group by RESTAPI_V1 by host to calculate average duration and CPU elapsed?</P> Fri, 14 Aug 2015 02:32:08 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-search-the-average-duration-of-REST-API-calls-taken-by/m-p/173976#M35014 diva_thilak 2015-08-14T02:32:08Z https://community.splunk.com/t5/Getting-Data-In/How-to-search-the-average-duration-of-REST-API-calls-taken-by/m-p/173977#M35015 <P>Do a search for the events that contain RESTAPI and feed those results into the stats command</P> <PRE><CODE>index=web *RESTAPI* | stats avg(Duration) by host </CODE></PRE> <P>This assumes that the Duration field is being extracted, which it should, unless you have disabled kv extraction</P> Fri, 14 Aug 2015 07:46:00 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-search-the-average-duration-of-REST-API-calls-taken-by/m-p/173977#M35015 sduff_splunk 2015-08-14T07:46:00Z https://community.splunk.com/t5/Getting-Data-In/How-to-search-the-average-duration-of-REST-API-calls-taken-by/m-p/173978#M35016 <P>2015-08-13 22:23:10,530 UNKNOWN_USER [WebContainer : 9] INFO - End : Duration= 000322 CPU elapsed= 70.987723 - service: /AX_IServicesRESTAPI_v1</P> <P>2015-08-13 22:23:10,530 UNKNOWN_USER [WebContainer : 9] INFO - End : Duration= 000022 CPU elapsed= 75.987723 - service: /AX_IServicesRESTAPI_v2</P> <P>2015-08-13 22:23:10,530 UNKNOWN_USER [WebContainer : 9] INFO - End : Duration= 000002 CPU elapsed= 50.987723 - service: /AX_IServicesRESTAPI_v3</P> <P>Thank you Sduff, if there are multiple rest services which are set to run on multiple nodes, how can i group by rest api service names and identify the average duration per host.</P> Tue, 29 Sep 2020 06:58:43 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-search-the-average-duration-of-REST-API-calls-taken-by/m-p/173978#M35016 diva_thilak 2020-09-29T06:58:43Z https://community.splunk.com/t5/Getting-Data-In/How-to-search-the-average-duration-of-REST-API-calls-taken-by/m-p/173979#M35017 <P>You'll probably need to 'rex' out the field you require</P> <PRE><CODE> index=web *RESTAPI* | rex field=_raw "service:(?&lt;rest_service&gt;.*)" | stats avg(Duration) by rest_service </CODE></PRE> Tue, 18 Aug 2015 04:37:53 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-search-the-average-duration-of-REST-API-calls-taken-by/m-p/173979#M35017 sduff_splunk 2015-08-18T04:37:53Z https://community.splunk.com/t5/Getting-Data-In/How-to-search-the-average-duration-of-REST-API-calls-taken-by/m-p/173980#M35018 <P>Hi,</P> <P>I wanted to know how did you get this timing for each service (RESTAPI) call.<BR /> Can you please explain me about this. It would be very helpful for me.</P> <P>Jay</P> Thu, 04 Feb 2016 14:06:09 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-search-the-average-duration-of-REST-API-calls-taken-by/m-p/173980#M35018 jaymnr7 2016-02-04T14:06:09Z