Splunk Observability Cloud

Splunk Observability APi's

MisterB
New Member

Hello, we are using Splunk Observability migrating from another solution. We have certain scripts that will validate aggregated metrics (namely average of a p99).

Working with splunk observability we are having difficult finding and api/method that will give us this information stablishing a single metric,value in a given timeline. 

This is what we want to achieve:
From X to Y give me average of P99 for "latency_metric".

The expected result should be a single data point what is the average p99 of latency metric from that timeframe, namely something like:

300ms

Any idea of what can we use? 

0 Karma

bishida
Splunk Employee
Splunk Employee

Check out this API reference for being able to use SignalFlow through the API:

https://dev.splunk.com/observability/reference/api/signalflow/latest#endpoint-create-websocket-conne...

Also, if you want to work within Splunk Cloud/Enterprise, you can use the Observability Cloud Infrastructure Monitoring TA which will allow you to  use the sim command in your spl and you can use SignalFlow there to get that metric.

https://splunkbase.splunk.com/app/5247

0 Karma

livehybrid
Ultra Champion

Hi @MisterB 

Would the following solve your requirement? 

A = data('Latency', rollup='average').percentile(pct=99).mean().publish()

livehybrid_0-1752734718621.png

You could change the rollup to 'max' if you'd prefer. 

:glowing_star: Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...