Splunk Observability APi's

[MisterB]

Hello, we are using Splunk Observability migrating from another solution. We have certain scripts that will validate aggregated metrics (namely average of a p99).

Working with splunk observability we are having difficult finding and api/method that will give us this information stablishing a single metric,value in a given timeline. 

This is what we want to achieve:
From X to Y give me average of P99 for "latency_metric".

The expected result should be a single data point what is the average p99 of latency metric from that timeframe, namely something like:

300ms

Any idea of what can we use? 

[bishida]

Check out this API reference for being able to use SignalFlow through the API:

https://dev.splunk.com/observability/reference/api/signalflow/latest#endpoint-create-websocket-conne...

Also, if you want to work within Splunk Cloud/Enterprise, you can use the Observability Cloud Infrastructure Monitoring TA which will allow you to  use the sim command in your spl and you can use SignalFlow there to get that metric.

https://splunkbase.splunk.com/app/5247

[livehybrid]

Hi @MisterB 

Would the following solve your requirement? 

A = data('Latency', rollup='average').percentile(pct=99).mean().publish()

You could change the rollup to 'max' if you'd prefer. 

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing