How to extract response time? - Splunk Community

Splunk Dev

How to extract response time?

response_time:0.002941865 app_id:\"c232e3a2-cecb-4e81-9beb-3150710c9a0a\"

Extract response time only

Hi

Try this

| makeresults 
| eval test="response_time:0.002941865 app_id:\"c232e3a2-cecb-4e81-9beb-3150710c9a0a\"" 
| rex field=test "response_time:(?P<response_time>[\S]+)"

Get Updates on the Splunk Community!

Recap | Agentic Operations Start with Context: Build the Right Data Foundation

Agentic Operations Start with Context: Build the Right Data Foundation By Courtney Wright, Product Marketing ...

Recap | Assisted, Augmented or Agentic? Choose Your Splunk Starting Point

Assisted, Augmented or Agentic? Choose Your Splunk Starting Point By Courtney Wright, Product Marketing ...

Session 2 | Beyond the Thread: Operationalizing AI with Confidence

Session 2 Beyond the Thread: Operationalizing AI with Confidence The true power of the Cisco Data Fabric ...