Hello Experts ,
I have a splunk query which is giving me average response time using the filed "process_time".
I want to create an Alert when output of this query is > 2 seconds. Please advice , how I could setup this alert.
I tried multiple options they didint work. I tried to add | where process_time > 2. but this option didnt work.
query | stats avg(process_time)
Output :
avg(process_time)
0.07894736842105263
Hi,
Please try below
<yourSearch>
| stats avg(process_time) as avg_process_time
| where avg_process_time > 2
Hi,
Please try below
<yourSearch>
| stats avg(process_time) as avg_process_time
| where avg_process_time > 2
This works like a charm ... Thanks
@kirangurram
try this
query | stats avg(process_time) as process_time | where process_time > 2
This works like a charm ... Thanks