172.22.220.15 - XXX@XXX.com [05/Jan/2016:01:19:36 -0600] "GET HTTPS://XXX.allianceweb2.XXXX.com/AERWEB/dwr/interface/CheckPersonalizedOption.js;jsessionid=0000vYT... HTTP/1.1" 200 1319
Try this, assuming the last for digits is response time,
.... | rex "\s(?<rt>\d+)$" | stats avg(rt) as response_time
Need your help agin in figuring on how to get the statistics related to uri_path,count,response time.
I have another field called as uridomain which has HTTPS://XXXXXX.com, can i get statistics related to uripath,count,response time .
Thanks for your help again.
You should post that as a different question with details on what type of stats you are looking for. From this question, it is unclear what stats you need (min, max, avg, sum, count, dc etc) There are several option. You can read about it here http://docs.splunk.com/Documentation/Splunk/6.1/SearchReference/Commonstatsfunctions