<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Calculate max TPS over period of time (2 months) everyday in Monitoring Splunk</title>
    <link>https://community.splunk.com/t5/Monitoring-Splunk/Calculate-max-TPS-over-period-of-time-2-months-everyday/m-p/439300#M6370</link>
    <description>&lt;P&gt;index=xyz host=xyz*web* NOT _ui AND NOT medias AND NOT "/backoffice" AND "HTTP/1.1\" 200"|bin _time span=1d | stats max(TPS) as c  by _time .&lt;/P&gt;

&lt;P&gt;Gives you maximum vlaues of TPS per day  &lt;/P&gt;

&lt;P&gt;or you can use &lt;/P&gt;

&lt;P&gt;index=xyz host=xyz*web* NOT _ui AND NOT medias AND NOT "/backoffice" AND "HTTP/1.1\" 200"| timechart span=1d max(current_size) as c&lt;/P&gt;</description>
    <pubDate>Tue, 29 Sep 2020 23:02:13 GMT</pubDate>
    <dc:creator>ssadanala1</dc:creator>
    <dc:date>2020-09-29T23:02:13Z</dc:date>
    <item>
      <title>Calculate max TPS over period of time (2 months) everyday</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/Calculate-max-TPS-over-period-of-time-2-months-everyday/m-p/439299#M6369</link>
      <description>&lt;P&gt;HI, &lt;/P&gt;

&lt;P&gt;I want to get the max TPS over period of time per day (last 2 months). Any idea what would be the ideal way to do this? &lt;/P&gt;

&lt;P&gt;I tried a query but i am not sure to get it per day&lt;/P&gt;

&lt;BLOCKQUOTE&gt;
&lt;P&gt;index=xyz host=xyz*web* NOT &lt;EM&gt;_ui&lt;/EM&gt; AND NOT &lt;EM&gt;medias&lt;/EM&gt; AND NOT "/backoffice" AND "HTTP/1.1\" 200" | timechart span=1s count AS TPS | eventstats max(TPS) as peakTPS | eval peakTime=if(peakTPS==TPS,_time,null()) | stats avg(TPS) as avgTPS first(peakTPS) as peakTPS &lt;/P&gt;
&lt;/BLOCKQUOTE&gt;</description>
      <pubDate>Tue, 29 Sep 2020 23:02:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/Calculate-max-TPS-over-period-of-time-2-months-everyday/m-p/439299#M6369</guid>
      <dc:creator>dantu</dc:creator>
      <dc:date>2020-09-29T23:02:10Z</dc:date>
    </item>
    <item>
      <title>Re: Calculate max TPS over period of time (2 months) everyday</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/Calculate-max-TPS-over-period-of-time-2-months-everyday/m-p/439300#M6370</link>
      <description>&lt;P&gt;index=xyz host=xyz*web* NOT _ui AND NOT medias AND NOT "/backoffice" AND "HTTP/1.1\" 200"|bin _time span=1d | stats max(TPS) as c  by _time .&lt;/P&gt;

&lt;P&gt;Gives you maximum vlaues of TPS per day  &lt;/P&gt;

&lt;P&gt;or you can use &lt;/P&gt;

&lt;P&gt;index=xyz host=xyz*web* NOT _ui AND NOT medias AND NOT "/backoffice" AND "HTTP/1.1\" 200"| timechart span=1d max(current_size) as c&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 23:02:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/Calculate-max-TPS-over-period-of-time-2-months-everyday/m-p/439300#M6370</guid>
      <dc:creator>ssadanala1</dc:creator>
      <dc:date>2020-09-29T23:02:13Z</dc:date>
    </item>
    <item>
      <title>Re: Calculate max TPS over period of time (2 months) everyday</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/Calculate-max-TPS-over-period-of-time-2-months-everyday/m-p/439301#M6371</link>
      <description>&lt;P&gt;but this wont give me the TPS right? span here is 1d? &lt;/P&gt;</description>
      <pubDate>Thu, 31 Jan 2019 21:28:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/Calculate-max-TPS-over-period-of-time-2-months-everyday/m-p/439301#M6371</guid>
      <dc:creator>dantu</dc:creator>
      <dc:date>2019-01-31T21:28:09Z</dc:date>
    </item>
  </channel>
</rss>

