Dashboards & Visualizations

timechart to display avg time taken by a file and spike it when the processing time increases

gravi
Explorer

I have a time column with time taken to process the file and I need to create a dashboard with chart to display the avg time. If the time taken to process the file increase it should show a spike in the chart.

I have tried
{table search} | bucket _time span=1d | stats avg(ProcessingTime) as AvgTime by _time

But it returns null.

Could you please help?

Thanks

Tags (1)
0 Karma

arjunpkishore5
Motivator

Assuming that the field ProcessingTime is present in your data, you can just do this instead of the stats

{table search} 
|timechart span=1d avg(ProcessingTime) as AvgTime

NOTE: Field names are case sensitive

0 Karma

gravi
Explorer

Thanks for the reply. But I get 'No results found.'

0 Karma

gravi
Explorer

Tried this
chart values(ProcessingTime) as AvgTime by FileName

it gives me results but the avgTime is 0 for all

0 Karma

to4kawa
Ultra Champion

HI, There may be no ProcessingTime field

0 Karma

gravi
Explorer

we are calculating the processing time as difference of two time fields and it is in the tables search with results

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...