Splunk Observability Cloud

APM -http.server.request.duration metrics coming as grouped instead of Histogram type

Maheswari1812
Explorer
http.server.request.durationhistogramDuration of HTTP server requests.

metrics coming as grouped like below

  • http.server.request.duration_sum
    http.server.request.duration_count
    http.server.request.duration_max
    http.server.request.duration_bucket
    http.server.request.duration_min
  • http.client.request.duration_count similarly...

http.route as well coming as Gain/Vl/* instead of full end point. Any solution for this. 

 

0 Karma

Maheswari1812
Explorer

Splunk Observability endpoint grouping settings adjustment
http.route coming as A/* - grouped endpoint
but url.path coming as A/B/C/D - full endpoint

how to fix this issue ? Anyone can help?

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What is your search/SPL for this?

0 Karma

Maheswari1812
Explorer

A = data('http.server.request.duration_min', filter=filter('http.route', '/Gain/vl/*')).publish(label='A') -signalflow builder query.

 

I need histogram function metrics instead of data. Is there any configuration changes required as part of otel instrumentation.

A = histogram('http.server.request.duration', filter=filter('http.route', '/batch-process/iomatch')).min().publish(label='A')

 

 

0 Karma

premadhas
Engager

Hi, @Maheswari1812 You was able to figureout the solution for this? If so can you please share?

I am also experiencing the same issue.
In my case, I want to set up a monitor to track latency for individual endpoints. However, when I search for the metric http.server.request.duration in the Observability Metric Finder, I see it listed (as shown in the screenshot), but when I click on it, it does not show the direct metric data. Instead, it only displays the aggregated metrics such as sum, count, min, max, and bucket, which are derived from http.server.request.duration.

My requirement is to access http.server.request.duration itself so that I can configure a monitor based directly on the latency duration. Could you please guide me on how to access this metric or suggest the correct metric to use for endpoint-level latency monitoring?

Screenshot 2025-11-27 at 02.31.13.pngScreenshot 2025-11-27 at 03.29.12.png

0 Karma
Get Updates on the Splunk Community!

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...