Splunk Search

How do I create a chart with the x-axis as processing time for transactions and the y-axis as number of events?

gowthamkb
Explorer
 Location          Processing Time (minutes)               
 -----------       ---------------------------
 Central           21.6                                     
 South East        27.4     

How do I generate a report with my x-axis as 'Processing time' and y-axis as Number of events? With this report, I want to get the time taken by transactions. Any help is appreciated. Thanks in advance.

0 Karma
1 Solution

twinspop
Influencer

Assuming your duration field is processing_time:

... | bin processing_time bins=10 | chart count over processing_time

The bin command has many more options to tweak this as required.

http://docs.splunk.com/Documentation/Splunk/6.4.3/SearchReference/Bin

View solution in original post

0 Karma

sundareshr
Legend

This should give you processing time in x-axis, but not sure how you can calculate txn totals.

... | stats count by "Processing Time (minutes)"
0 Karma

twinspop
Influencer

Assuming your duration field is processing_time:

... | bin processing_time bins=10 | chart count over processing_time

The bin command has many more options to tweak this as required.

http://docs.splunk.com/Documentation/Splunk/6.4.3/SearchReference/Bin

0 Karma

gowthamkb
Explorer

Thank you !

0 Karma

gowthamkb
Explorer

Location Processing Time (minutes) trans_date


Central 21 09/21/2016
South East 40 09/22/2016

Is there a way I can get a bar chart with time buckets , y-axis-primary showing percentage (transactions), y-axis secondary showing processing_time (0-10 mins, 10-20 mins etc) and x axis showing trans_date ?

0 Karma
Get Updates on the Splunk Community!

Video | Welcome Back to Smartness, Pedro

Remember Splunk Community member, Pedro Borges? If you tuned into Episode 2 of our Smartness interview series, ...

Detector Best Practices: Static Thresholds

Introduction In observability monitoring, static thresholds are used to monitor fixed, known values within ...

Expert Tips from Splunk Education, Observability in Action, Plus More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...