Hi Here is my sample data,
2016-05-27 08:36:30,497:INFO :WebContainer : 12: Total time to execute service _prc:aaaa : 796 ms [system]: InvokeSOAPWebservice
2016-05-27 08:36:30,497:INFO :WebContainer : 12: Total time to execute service _prc:aaaa : 7964 ms [system]: InvokeSOAPWebservice
2016-05-27 08:36:30,497:INFO :WebContainer : 12: Total time to execute service _ord:bbb : 3796 ms [system]: InvokeSOAPWebservice
2016-05-27 08:36:30,497:INFO :WebContainer : 12: Total time to execute service _prc:bbb : 1796 ms [system]: InvokeSOAPWebservice
How can i get average response times for the above data?
Like this:
... | rex "Total\s+time\s+to\s+execute\s+service\s+(?<service>\S+)\s+:\s+(?<response_time>\d+)"
| stats avg(response_time) BY service
Like this:
... | rex "Total\s+time\s+to\s+execute\s+service\s+(?<service>\S+)\s+:\s+(?<response_time>\d+)"
| stats avg(response_time) BY service