Dashboards & Visualizations

timechart to display avg time taken by a file and spike it when the processing time increases

gravi
Explorer

I have a time column with time taken to process the file and I need to create a dashboard with chart to display the avg time. If the time taken to process the file increase it should show a spike in the chart.

I have tried
{table search} | bucket _time span=1d | stats avg(ProcessingTime) as AvgTime by _time

But it returns null.

Could you please help?

Thanks

Tags (1)
0 Karma

arjunpkishore5
Motivator

Assuming that the field ProcessingTime is present in your data, you can just do this instead of the stats

{table search} 
|timechart span=1d avg(ProcessingTime) as AvgTime

NOTE: Field names are case sensitive

0 Karma

gravi
Explorer

Thanks for the reply. But I get 'No results found.'

0 Karma

gravi
Explorer

Tried this
chart values(ProcessingTime) as AvgTime by FileName

it gives me results but the avgTime is 0 for all

0 Karma

to4kawa
Ultra Champion

HI, There may be no ProcessingTime field

0 Karma

gravi
Explorer

we are calculating the processing time as difference of two time fields and it is in the tables search with results

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...