topic Re: Counting based on range in Splunk Search

Counting based on range

Nidd — Wed, 07 Aug 2019 12:36:31 GMT

I have an application log like:

8/7/19
1:30:35.977 AM  
[8/7/19 1:30:35:977 MST] 00000232 MyClass I   Method Process | ProcessingTime=8ms
host =  myHost source = /location/SystemOut.log

There are many such logs with different ProcessingTime.

I would like to have a range query that would differentiate the ProcessingTime like:

0-100ms         5
100-200ms       12
200-500ms       6
500-1000ms      24
1000-500ms      40
above 5000ms    2

Re: Counting based on range

jpolvino — Wed, 07 Aug 2019 12:40:37 GMT

I think you already asked this question here: here

Re: Counting based on range

jpolvino — Wed, 07 Aug 2019 12:41:30 GMT

If this is a duplicate question, please delete it.

Re: Counting based on range

Nidd — Wed, 07 Aug 2019 13:05:58 GMT

Yes. Thank you

Re: Counting based on range

Nidd — Wed, 07 Aug 2019 13:56:00 GMT

I don't find any option of delete here !! Please help how.