topic Splunk Observability APi's in Splunk Observability Cloud

Splunk Observability APi's

MisterB — Wed, 16 Jul 2025 22:38:52 GMT

Hello, we are using Splunk Observability migrating from another solution. We have certain scripts that will validate aggregated metrics (namely average of a p99).

Working with splunk observability we are having difficult finding and api/method that will give us this information stablishing a single metric,value in a given timeline.

This is what we want to achieve:
From X to Y give me average of P99 for "latency_metric".

The expected result should be a single data point what is the average p99 of latency metric from that timeframe, namely something like:

300ms

Any idea of what can we use?

Re: Splunk Observability APi's

livehybrid — Thu, 17 Jul 2025 06:45:38 GMT

Hi @MisterB

Would the following solve your requirement?

A = data('Latency', rollup='average').percentile(pct=99).mean().publish()

You could change the rollup to 'max' if you'd prefer.

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Re: Splunk Observability APi's

bishida — Wed, 23 Jul 2025 21:18:40 GMT

Check out this API reference for being able to use SignalFlow through the API:

https://dev.splunk.com/observability/reference/api/signalflow/latest#endpoint-create-websocket-connection

Also, if you want to work within Splunk Cloud/Enterprise, you can use the Observability Cloud Infrastructure Monitoring TA which will allow you to use the sim command in your spl and you can use SignalFlow there to get that metric.

https://splunkbase.splunk.com/app/5247