Splunk Search

How do I create a chart with the x-axis as processing time for transactions and the y-axis as number of events?

gowthamkb
Explorer
 Location          Processing Time (minutes)               
 -----------       ---------------------------
 Central           21.6                                     
 South East        27.4     

How do I generate a report with my x-axis as 'Processing time' and y-axis as Number of events? With this report, I want to get the time taken by transactions. Any help is appreciated. Thanks in advance.

0 Karma
1 Solution

twinspop
Influencer

Assuming your duration field is processing_time:

... | bin processing_time bins=10 | chart count over processing_time

The bin command has many more options to tweak this as required.

http://docs.splunk.com/Documentation/Splunk/6.4.3/SearchReference/Bin

View solution in original post

0 Karma

sundareshr
Legend

This should give you processing time in x-axis, but not sure how you can calculate txn totals.

... | stats count by "Processing Time (minutes)"
0 Karma

twinspop
Influencer

Assuming your duration field is processing_time:

... | bin processing_time bins=10 | chart count over processing_time

The bin command has many more options to tweak this as required.

http://docs.splunk.com/Documentation/Splunk/6.4.3/SearchReference/Bin

0 Karma

gowthamkb
Explorer

Thank you !

0 Karma

gowthamkb
Explorer

Location Processing Time (minutes) trans_date


Central 21 09/21/2016
South East 40 09/22/2016

Is there a way I can get a bar chart with time buckets , y-axis-primary showing percentage (transactions), y-axis secondary showing processing_time (0-10 mins, 10-20 mins etc) and x axis showing trans_date ?

0 Karma
Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...