topic Re: Why are we encountering an issue while fetching response time? in Dashboards & Visualizations

Why are we encountering an issue while fetching response time?

sagar1992 — Fri, 15 Mar 2019 09:04:43 GMT

HI Team,

I am using below query, but i want diff column in seconds format, but not sure, it is showing 00:00:19.000000.

I just have to minus response-request. have converted to epoch also.

2019-03-15T05:57:02 - 2019-03-15T05:56:43 == result should be in sec

query is below

index="test_mulesoft" source=RoyalCaninOMSDev "*ProcessOrder*" | rex field=_raw "corelationid.*:\W+(?.*)\"" |  eval DateTime=strftime(_time,"%Y-%m-%dT%H:%M:%S") | eventstats earliest(DateTime) as request, latest(DateTime) as response by Request_Id  | eval it = strptime(request, "%Y-%m-%dT%H:%M:%S") | eval ot = strptime(response, "%Y-%m-%dT%H:%M:%S") | eval diff = tostring((ot - it), "duration") | table Request_Id,request,response,it,ot,diff

ext]1

Thanks
Sagar

Re: Why are we encountering an issue while fetching response time?

harishalipaka — Fri, 15 Mar 2019 09:15:19 GMT

hi @sagar1992

index="test_mulesoft" source=RoyalCaninOMSDev "ProcessOrder" | rex field=_raw "corelationid.:\W+(?.)\"" | eval DateTime=strftime(_time,"%Y-%m-%dT%H:%M:%S") | eventstats earliest(DateTime) as request, latest(DateTime) as response by Request_Id | eval it = strptime(request, "%Y-%m-%dT%H:%M:%S") | eval ot = strptime(response, "%Y-%m-%dT%H:%M:%S") | eval diff = ot - it

Re: Why are we encountering an issue while fetching response time?

sagar1992 — Fri, 15 Mar 2019 10:41:50 GMT

it is doing subtraction of epoch, i need that output to be in seconds.

Re: Why are we encountering an issue while fetching response time?

nickhills — Fri, 15 Mar 2019 11:00:17 GMT

Hi @sagar1992

This should subtract the two epoch values and round to the second.

...| eval it = strptime(request, "%Y-%m-%dT%H:%M:%S") | eval ot = strptime(response, "%Y-%m-%dT%H:%M:%S") | eval diff_sec =round(ot - it,0)

Re: Why are we encountering an issue while fetching response time?

sagar1992 — Fri, 15 Mar 2019 12:01:24 GMT

Awesome, This Worked!!

Thanks @nickhillscpl

Re: Why are we encountering an issue while fetching response time?

nickhills — Fri, 15 Mar 2019 12:02:57 GMT

Glad to have helped. Please upvote to help others in the future!
All the best.