Hi I am fairly new to Splunk , thank you in advance if you can help me...:)
My goal is to log the service response duration each time a ESService is called. The ESService value can be anything. In the table format below I am able to see which service is being hit and the duration .
But in the visualization section, all the events showing the same color, Is there anyway to show different color for each ESService . For example , when ESBusinessrep blue, for ESPerson red etc.(dynamically there can be N number of service types). And when I hover on the bars they are showing time, and duration values only not the ESService. How to achieve this?
A bar chart will give you a different colour for each series, so you would need to do something like
| chart max(duration) over _time by ESService
A bar chart will give you a different colour for each series, so you would need to do something like
| chart max(duration) over _time by ESService
Thank you bowesmana!.
Really appreciate your help on this.
now I am greedy....
Can I get query to get Max, Average, Minimum of each ESService?
transaction transactionId startswith="step=Before" endswith="step=After" | stats max(duration) as MaxRespTime avg(duration) as AvgRespTime min(duration) as MinRespTime by ESService
This should do it .