Monitoring Splunk

Splunk query for getting logs in descending order based on API execution time

athul_r_m
New Member

Can some one help me with query for getting logs in descending order based on API execution time which printed on logs.

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @athul_r_m,

your request is just a little too vague!

could you better describe your data?

e.g. fields to display, API execution time fieldname, etc...

Anyway, to sort in descrnding order you have to see the options of the sort command (https://docs.splunk.com/Documentation/SCS/current/SearchReference/SortCommandOverview😞

index=your_index
| sort -API_execution_time
| table API_execution_time field1 field2 field3 

Ciao.

Giuseppe

 

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...