topic Re: how to find response time of end to end requests from logs? in Reporting https://community.splunk.com/t5/Reporting/how-to-find-response-time-of-end-to-end-requests-from-logs/m-p/434505#M9922 <P>In order to get a response time, you either need:<BR /> 1.) The event to report it (which I cant see in your example)<BR /> 2.) A 'start' event, and an 'end' event, and then calculate the difference between the two. - You can use the <CODE>transaction</CODE> command to automatically calculate this. <A href="https://docs.splunk.com/Documentation/Splunk/7.2.4/SearchReference/Transaction">https://docs.splunk.com/Documentation/Splunk/7.2.4/SearchReference/Transaction</A></P> Fri, 08 Mar 2019 10:11:07 GMT nickhills 2019-03-08T10:11:07Z how to find response time of end to end requests from logs? https://community.splunk.com/t5/Reporting/how-to-find-response-time-of-end-to-end-requests-from-logs/m-p/434504#M9921 <P>{"line":"10.198.125.217 - - [08/Mar/2019:06:07:17 +0000] \"POST /install/Instere/inser/form HTTP/1.1\" 200 485312","source":"stdout","tag":"abcdef12345","attrs":{"adsk.moniker":"instl-p-ue1","cloudos.portfolio.version":"2.0.200","cloudos.secrets.hash":"****<STRONG><EM>","com.amazonaws.ecs.container-name":"blue","com.amazonaws.ecs.task-arn":"arn:aws:ecs:us-east-1:</EM></STRONG>****<STRONG><EM>:task/</EM></STRONG>*****<STRONG><EM>","com.amazonaws.ecs.task-definition-version":"108","docker.image":"artifactory.pr.awseast.a</EM></STRONG>**.net/abcdcloud/instl:master-abcd1234","docker.tag":"master-abcd1234"}}</P> Fri, 08 Mar 2019 06:09:43 GMT https://community.splunk.com/t5/Reporting/how-to-find-response-time-of-end-to-end-requests-from-logs/m-p/434504#M9921 varshna 2019-03-08T06:09:43Z Re: how to find response time of end to end requests from logs? https://community.splunk.com/t5/Reporting/how-to-find-response-time-of-end-to-end-requests-from-logs/m-p/434505#M9922 <P>In order to get a response time, you either need:<BR /> 1.) The event to report it (which I cant see in your example)<BR /> 2.) A 'start' event, and an 'end' event, and then calculate the difference between the two. - You can use the <CODE>transaction</CODE> command to automatically calculate this. <A href="https://docs.splunk.com/Documentation/Splunk/7.2.4/SearchReference/Transaction">https://docs.splunk.com/Documentation/Splunk/7.2.4/SearchReference/Transaction</A></P> Fri, 08 Mar 2019 10:11:07 GMT https://community.splunk.com/t5/Reporting/how-to-find-response-time-of-end-to-end-requests-from-logs/m-p/434505#M9922 nickhills 2019-03-08T10:11:07Z