Splunk Search

How to build a timechart to show endpoint response time over a 95 Percentile?

jprovenzale
Explorer

Hello,

I have 3 fields from which I need to build a line chart on a Time series.

 

ServerTime

Endpoint

ResponseTime

 

I need to show  endpoint response time over a 95 percentile on servertime.

So the servertime will be on the Y-Axis, the time series on the X-Axis and a legend that shows the endpoints.

Can you please suggest a query that would achieve this.

 

Thank you

 

Labels (3)
0 Karma

jprovenzale
Explorer

Hi,

Aplologies. In my frustration I did not articulate fully.

I have actually figured it out now.

Thanks for your time.



0 Karma

jprovenzale
Explorer

Quick explanation of the issue.

I actually over complicated the problem when it was very simple.
I needed to show endpoint response times over am 99% percentile of servtime, which is the length of time of the transaction.

In the end it was a very easy query.  Set up your search and filters and the timechart line looks like this.

timechart p99(servetime) by endpoint

Thanks

VatsalJagani
SplunkTrust
SplunkTrust

@jprovenzale - If you can please post an answer with an explanation so others can get benefit from it in the future.

Also, accept your answer. Thanks!!!

0 Karma

bowesmana
SplunkTrust
SplunkTrust

You have 3 dimensions 

response time - this would typically be the Y axis

time of event - that is the X axis

servertime - what is this? and what is its relationship to response time and endpoint?

 

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...