Splunk Search

How to build a timechart to show endpoint response time over a 95 Percentile?

jprovenzale
Explorer

Hello,

I have 3 fields from which I need to build a line chart on a Time series.

 

ServerTime

Endpoint

ResponseTime

 

I need to show  endpoint response time over a 95 percentile on servertime.

So the servertime will be on the Y-Axis, the time series on the X-Axis and a legend that shows the endpoints.

Can you please suggest a query that would achieve this.

 

Thank you

 

Labels (3)
0 Karma

jprovenzale
Explorer

Hi,

Aplologies. In my frustration I did not articulate fully.

I have actually figured it out now.

Thanks for your time.



0 Karma

jprovenzale
Explorer

Quick explanation of the issue.

I actually over complicated the problem when it was very simple.
I needed to show endpoint response times over am 99% percentile of servtime, which is the length of time of the transaction.

In the end it was a very easy query.  Set up your search and filters and the timechart line looks like this.

timechart p99(servetime) by endpoint

Thanks

VatsalJagani
SplunkTrust
SplunkTrust

@jprovenzale - If you can please post an answer with an explanation so others can get benefit from it in the future.

Also, accept your answer. Thanks!!!

0 Karma

bowesmana
SplunkTrust
SplunkTrust

You have 3 dimensions 

response time - this would typically be the Y axis

time of event - that is the X axis

servertime - what is this? and what is its relationship to response time and endpoint?

 

0 Karma
Get Updates on the Splunk Community!

Buttercup Games Tutorial Extension - part 9

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games Tutorial Extension - part 8

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Introducing the Splunk Developer Program!

Hey Splunk community! We are excited to announce that Splunk is launching the Splunk Developer Program in ...