Dashboards & Visualizations

Graph for customer field

swetasoneji
New Member

462 <14>1 2019-03-26T10:45:33.423222+00:00 loggregator ae04d9d7-5ec4-4acd-a954-63c2e3733691 [APP/PROC/WEB] - - 2019-03-26 10:45:33.422+0000 org{am_sp} [log_from=ReportService] [thread=http-nio-8080-exec-8 ] INFO c.j.i.s.p.providers.PrismReportProvider [user=I298611] [swagger-d83e2a40-4fad-11e9-9d7a-6bf144a5c99d] [POST /api/v1/ts/collect/range] <-- Loaded Prie Report MAS/SRS - Time Series (EMEA-NOSPLIT)/72022/2019-03-15 (took 00:00:25.864)

I created a custom field for the "took" part of the results
I then wanted to graph how long prie is taking to execute reports

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

We need a little more to work with. A graph needs at least two fields. In this case, one of them is "took", but what is the other? The timechartcommand has an implied _time as the other dimension so perhaps index=am_sp log_from=ReportService "Loaded Pre Report" | timechart avg(took) as took will work for you.

---
If this reply helps you, Karma would be appreciated.
0 Karma

swetasoneji
New Member

Can anyone help pls?

0 Karma

swetasoneji
New Member

index=am_sp log_from=ReportService "Loaded Pre Report"

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...