topic Re: Plot Response Time Events from Web Log in Splunk Search

Plot Response Time Events from Web Log

zloc — Tue, 29 May 2012 23:42:40 GMT

Hi there,

This should be a pretty simple question. I have looked around for a while. We have a web log we are trying to do some analysis on.

I would like to plot all the events in the last 4 hours (very low volume) and see the response time graph.

The response time field is called ms and it's in milliseconds (ms=185).

Help please.

Thank you!

Re: Plot Response Time Events from Web Log

Damien_Dallimor — Wed, 30 May 2012 03:01:00 GMT

You could use table or timechart commands to format the data for graphing.

... | table _time,ms
... | timechart avg(ms) min(ms) max(ms)

If you provide a sample of your logs I could probably give a better example.

Re: Plot Response Time Events from Web Log

zloc — Wed, 30 May 2012 05:32:26 GMT

Thank you!!!

'| table _time,ms" worked perfectly. I really appreciate the help

Here is a line from the log. This is from a Google App Engine (GAE) log.

/something/whatwhat?longitude=-118.4521985707045&latitude=33.99926074318029&storePin=blahblah HTTP/1.1" 200 495 - "blah.dev/1000 CFNetwork/548.1.4 Darwin/11.0.0" "blahblah.appspot.com" ms=176 cpu_ms=38 api_cpu_ms=38 cpm_usd=0.001345 instance=blahblahblah