https://community.splunk.com/t5/Splunk-Search/How-to-search-average-response-times-at-a-specific-time/m-p/285900#M86499 <P>thank you. this helps. what if I need this to be searched over three days for example today, yesterday and a week ago at the same time.</P> Thu, 07 Apr 2016 18:00:18 GMT nlrdy 2016-04-07T18:00:18Z https://community.splunk.com/t5/Splunk-Search/How-to-search-average-response-times-at-a-specific-time/m-p/285898#M86497 <P>Hello,</P> <P>I'm trying to write a splunk query but dont know where to start with. Is it possible to write a query to search for response times at a particular time on a day for example, comparing the response times today at 8:00 AM vs yesterday at 8:00 AM.</P> <P>Thank you</P> Thu, 07 Apr 2016 16:09:26 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-average-response-times-at-a-specific-time/m-p/285898#M86497 nlrdy 2016-04-07T16:09:26Z https://community.splunk.com/t5/Splunk-Search/How-to-search-average-response-times-at-a-specific-time/m-p/285899#M86498 <P>Try something like this</P> <PRE><CODE>your base search earliest=-1d@d latest=now | where strftime(_time,"%H:%M")="08:00" | eval Period=if(_time&gt;relative_time(now(),"-24h"),"Today","Yesterday") | eval temp=1| chart values(response_time) over temp by Period | fields - temp </CODE></PRE> Thu, 07 Apr 2016 16:16:00 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-average-response-times-at-a-specific-time/m-p/285899#M86498 somesoni2 2016-04-07T16:16:00Z https://community.splunk.com/t5/Splunk-Search/How-to-search-average-response-times-at-a-specific-time/m-p/285900#M86499 <P>thank you. this helps. what if I need this to be searched over three days for example today, yesterday and a week ago at the same time.</P> Thu, 07 Apr 2016 18:00:18 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-average-response-times-at-a-specific-time/m-p/285900#M86499 nlrdy 2016-04-07T18:00:18Z