Dashboards & Visualizations

How to create a single timechart to show the trend of time latency for each case in my sample data?

Communicator

I have these 9 cases and have a transaction timestamp. I have a field for the timestamp time-spent which is giving me the the time value (20 sec).

I would like to create one search/chart to show the trend for each case time latency. I have created multiple charts, but I assume there is a better way to create one optimized search.

Get contact is 50 sec
Moving File is 20 sec
Get Folder Information is 10 sec
Moving file items is 4 sec
Settings flags for file item is 8 sec
header counts for file is 2 sec
Get file Information is 3 sec
Authenticating Users is 5 sec
Transaction time for site login is 4 sec

Tags (2)
1 Solution

Esteemed Legend

I assume you have a field for operation or similar so you can just do this:

... | timechart span=5m avg(time-spent) BY operation

View solution in original post

Esteemed Legend

I assume you have a field for operation or similar so you can just do this:

... | timechart span=5m avg(time-spent) BY operation

View solution in original post

Communicator

thanks much. it works.

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes and swag!