<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Web service response metrics in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Web-service-response-metrics/m-p/270238#M81337</link>
    <description>&lt;P&gt;I want to plot a graph for web service response for last 'n' hours.  I want the web service actual response time to be on Y axis and each request to be on X axis. I'm capturing the response time for each request. Here is the log - &lt;/P&gt;

&lt;P&gt;2015-10-09 09:48:49.433 INFO : [com.mycomany.LoggingAspect:54] 0bc36bc9-dee2-4dc9-9450-ce36db8ffbc7 Method=helloworld, HttpStatusCode=200, ElapsedTime=100&lt;/P&gt;</description>
    <pubDate>Mon, 12 Oct 2015 19:07:21 GMT</pubDate>
    <dc:creator>dubey20</dc:creator>
    <dc:date>2015-10-12T19:07:21Z</dc:date>
    <item>
      <title>Web service response metrics</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Web-service-response-metrics/m-p/270238#M81337</link>
      <description>&lt;P&gt;I want to plot a graph for web service response for last 'n' hours.  I want the web service actual response time to be on Y axis and each request to be on X axis. I'm capturing the response time for each request. Here is the log - &lt;/P&gt;

&lt;P&gt;2015-10-09 09:48:49.433 INFO : [com.mycomany.LoggingAspect:54] 0bc36bc9-dee2-4dc9-9450-ce36db8ffbc7 Method=helloworld, HttpStatusCode=200, ElapsedTime=100&lt;/P&gt;</description>
      <pubDate>Mon, 12 Oct 2015 19:07:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Web-service-response-metrics/m-p/270238#M81337</guid>
      <dc:creator>dubey20</dc:creator>
      <dc:date>2015-10-12T19:07:21Z</dc:date>
    </item>
    <item>
      <title>Re: Web service response metrics</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Web-service-response-metrics/m-p/270239#M81338</link>
      <description>&lt;P&gt;You still need to decide on your aggregator. Average ? Max? Stdev? Count? Let's assume average. Let's also assume &lt;CODE&gt;n&lt;/CODE&gt; = 2&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=foo sourcetype=bar earliest=-2h
| chart avg(ElapsedTime) as Average_Elapsed_Time by HttpStatusCode
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Maybe you want to checkout the method as well:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=foo sourcetype=bar earliest=-2h
| chart avg(ElapsedTime) as Average_Elapsed_Time by HttpStatusCode, Method
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;You might want to also investigate &lt;CODE&gt;timechart&lt;/CODE&gt;:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=foo sourcetype=bar earliest=-2h
| timechart span=5m avg(ElapsedTime) as Average_Elapsed_Time by HttpStatusCode
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 12 Oct 2015 19:17:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Web-service-response-metrics/m-p/270239#M81338</guid>
      <dc:creator>aljohnson_splun</dc:creator>
      <dc:date>2015-10-12T19:17:48Z</dc:date>
    </item>
  </channel>
</rss>

