Dashboards & Visualizations

Graph for customer field

swetasoneji
New Member

462 <14>1 2019-03-26T10:45:33.423222+00:00 loggregator ae04d9d7-5ec4-4acd-a954-63c2e3733691 [APP/PROC/WEB] - - 2019-03-26 10:45:33.422+0000 org{am_sp} [log_from=ReportService] [thread=http-nio-8080-exec-8 ] INFO c.j.i.s.p.providers.PrismReportProvider [user=I298611] [swagger-d83e2a40-4fad-11e9-9d7a-6bf144a5c99d] [POST /api/v1/ts/collect/range] <-- Loaded Prie Report MAS/SRS - Time Series (EMEA-NOSPLIT)/72022/2019-03-15 (took 00:00:25.864)

I created a custom field for the "took" part of the results
I then wanted to graph how long prie is taking to execute reports

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

We need a little more to work with. A graph needs at least two fields. In this case, one of them is "took", but what is the other? The timechartcommand has an implied _time as the other dimension so perhaps index=am_sp log_from=ReportService "Loaded Pre Report" | timechart avg(took) as took will work for you.

---
If this reply helps you, Karma would be appreciated.
0 Karma

swetasoneji
New Member

Can anyone help pls?

0 Karma

swetasoneji
New Member

index=am_sp log_from=ReportService "Loaded Pre Report"

0 Karma
Get Updates on the Splunk Community!

Exploring the OpenTelemetry Collector’s Kubernetes annotation-based discovery

We’ve already explored a few topics around observability in a Kubernetes environment -- Common Failures in a ...

Use ‘em or lose ‘em | Splunk training units do expire

Whether it’s hummus, a ham sandwich, or a human, almost everything in this world has an expiration date. And, ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...