Splunk Search

99% Percentile time_taken in IIS

joe06031990
Communicator

Hi I am trying to find the min, max and AVG for Percentile 99,90 and 75 with the bellow:

 

index="main" source="C:\\inetpub\\logs\\LogFiles\\*" host="WIN-699VGN4SK4U"
| eval responseTime=round(time_taken/1000)
| timechart span=1mon perc99(time_taken) as 99thPercentile perc90(time_taken) as 90thPercentile perc75(time_taken) as 75thPercentile
| stats min(99thPercentile) max(99thPercentile) avg(99thPercentile) min(90thPercentile) max(90thPercentile) avg(90thPercentile) min(75thPercentile) max(75thPercentile) avg(75thPercentile) by _time

 

 

min(99thPercentile) max(99thPercentile) avg(99thPercentile) min(90thPercentile) max(90thPercentile) avg(90thPercentile) min(75thPercentile) max(75thPercentile) avg(75thPercentile) 66.50 66.50 66.50 12.5 12.5 12.5 5.984375 5.984375 5.984375

 

 

However all the numbers are coming back the same, Any ideas?

 

Thanks

 

Joe

Labels (8)
0 Karma
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...