Dashboards & Visualizations

timechart to display avg time taken by a file and spike it when the processing time increases

gravi
Explorer

I have a time column with time taken to process the file and I need to create a dashboard with chart to display the avg time. If the time taken to process the file increase it should show a spike in the chart.

I have tried
{table search} | bucket _time span=1d | stats avg(ProcessingTime) as AvgTime by _time

But it returns null.

Could you please help?

Thanks

Tags (1)
0 Karma

arjunpkishore5
Motivator

Assuming that the field ProcessingTime is present in your data, you can just do this instead of the stats

{table search} 
|timechart span=1d avg(ProcessingTime) as AvgTime

NOTE: Field names are case sensitive

0 Karma

gravi
Explorer

Thanks for the reply. But I get 'No results found.'

0 Karma

gravi
Explorer

Tried this
chart values(ProcessingTime) as AvgTime by FileName

it gives me results but the avgTime is 0 for all

0 Karma

to4kawa
Ultra Champion

HI, There may be no ProcessingTime field

0 Karma

gravi
Explorer

we are calculating the processing time as difference of two time fields and it is in the tables search with results

0 Karma
Get Updates on the Splunk Community!

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

[Puzzles] Solve, Learn, Repeat: Nested loops in Event Conversion

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...