- Find Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- Re: How do I create a chart with the x-axis as pro...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Location Processing Time (minutes)
----------- ---------------------------
Central 21.6
South East 27.4
How do I generate a report with my x-axis as 'Processing time' and y-axis as Number of events? With this report, I want to get the time taken by transactions. Any help is appreciated. Thanks in advance.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Assuming your duration field is processing_time:
... | bin processing_time bins=10 | chart count over processing_time
The bin command has many more options to tweak this as required.
http://docs.splunk.com/Documentation/Splunk/6.4.3/SearchReference/Bin
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This should give you processing time in x-axis, but not sure how you can calculate txn totals.
... | stats count by "Processing Time (minutes)"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Assuming your duration field is processing_time:
... | bin processing_time bins=10 | chart count over processing_time
The bin command has many more options to tweak this as required.
http://docs.splunk.com/Documentation/Splunk/6.4.3/SearchReference/Bin
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you !
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Location Processing Time (minutes) trans_date
Central 21 09/21/2016
South East 40 09/22/2016
Is there a way I can get a bar chart with time buckets , y-axis-primary showing percentage (transactions), y-axis secondary showing processing_time (0-10 mins, 10-20 mins etc) and x axis showing trans_date ?
Preparing your Splunk Environment for OpenSSL3
Deprecation of Splunk Observability Kubernetes “Classic Navigator” UI starting ...
Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...
