Splunk Search

Calculate max Transaction per second per day

tmurray3
Path Finder

I am trying to figure out how to calculate the highest number of transaction per second for a given day. I would like the output to print the time and count. For example, at 10/11/2013 12:30:33 pm, 45 TPS

I cannot seem to figure out the query.

Thanks in advance for your help.

Tags (3)
0 Karma

the_wolverine
Champion

Use tstats if possible for performance:

| tstats count where index=APPAUTH earliest=-1w by _time span=1s | timechart span=1d max(count)
0 Karma

kristian_kolb
Ultra Champion

You can shorten the calculation a bit to;

index=appauth AUTH earliest=-1w | bucket _time span=1s | top 1 _time by date_mday | fields - percent, date_mday

Just change the earliest value as needed.

/K

0 Karma

tmurray3
Path Finder

I figured out how to calculate the max tps for a given day using the following query

index=appauth AUTH earliest=-1d|bucket _time span=1s|stats count by _time|sort by count,time DESC limit=1

However, I would also like to display the max tps per day over a week.

Any ideas?

0 Karma

manidandu
Explorer

Hi,

Do you have any resolution for this? Please post if you have any sample query.

0 Karma
Get Updates on the Splunk Community!

Get ready to show some Splunk Certification swagger at .conf24!

Dive into the deep end of data by earning a Splunk Certification at .conf24. We're enticing you again this ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Now On-Demand Join us to learn more about how you can leverage Service Level Objectives (SLOs) and the new ...

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...