Splunk Search

Calculate max Transaction per second per day

tmurray3
Path Finder

I am trying to figure out how to calculate the highest number of transaction per second for a given day. I would like the output to print the time and count. For example, at 10/11/2013 12:30:33 pm, 45 TPS

I cannot seem to figure out the query.

Thanks in advance for your help.

Tags (3)
0 Karma

the_wolverine
Champion

Use tstats if possible for performance:

| tstats count where index=APPAUTH earliest=-1w by _time span=1s | timechart span=1d max(count)
0 Karma

kristian_kolb
Ultra Champion

You can shorten the calculation a bit to;

index=appauth AUTH earliest=-1w | bucket _time span=1s | top 1 _time by date_mday | fields - percent, date_mday

Just change the earliest value as needed.

/K

0 Karma

tmurray3
Path Finder

I figured out how to calculate the max tps for a given day using the following query

index=appauth AUTH earliest=-1d|bucket _time span=1s|stats count by _time|sort by count,time DESC limit=1

However, I would also like to display the max tps per day over a week.

Any ideas?

0 Karma

manidandu
Explorer

Hi,

Do you have any resolution for this? Please post if you have any sample query.

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...