Dashboards & Visualizations

Compare avg of time takend and max time in timechart in same graph.

vamsi199
Engager

I want to have one graph which has time chart of avg time taken and max time.

is this possible?

Tags (2)
0 Karma
1 Solution

sundareshr
Legend

Lets assume you have a field called time_taken, this should work

.... | timechart span=1h avg(time_taken) as average max(time_taken) as max

View solution in original post

sundareshr
Legend

Lets assume you have a field called time_taken, this should work

.... | timechart span=1h avg(time_taken) as average max(time_taken) as max
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...