Splunk Search

How to calculate average response time by day per request type?

nlrdy
Explorer

Hello,

I was able to get the chart with below fields. Now my question is how do I calculate average response time ((NA+EMEA+APAC)/3) for each web service request for each day ?

alt text

Tags (3)
0 Karma
1 Solution

somesoni2
Revered Legend

Just add following to your current search

your current search | eventstats avg(avg_response) as DailyAvg by Time Request

View solution in original post

somesoni2
Revered Legend

Just add following to your current search

your current search | eventstats avg(avg_response) as DailyAvg by Time Request

nlrdy
Explorer

Works perfectly !!. Thank you.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Assuming you have events with timestamp, Request, DC, and response fields, you can do something like this:

base search returning those events | bin span=1d _time | stats avg(response) as avg_response by DC Request | timechart avg(avg_response) by Request

That's assuming you want to average per DC first, then average those again. Alternatively, you could average over all DCs together like this:

base search returning those events | timechart avg(response) by Request

nlrdy
Explorer

The chart should still be present with aggregated values. is this possible without using dashboard ?

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...