Splunk Search

How can I view daily/monthly job query search average times?

New Member

Given an initial search query, I'm trying to view daily and monthly job search query runtimes, then average the times out respectively.

Tags (3)
0 Karma

SplunkTrust
SplunkTrust

Check out the search dashboards in the monitoring console.

0 Karma

New Member

I was able to get one step closer with the following search query:

index=audit savedsearchname!="" info=completed | eval duration=totalruntime | stats count by time, savedsearchname, user, duration | stats avg(duration)

0 Karma