How to calculate response time for my sample data?

[manjunathin]

172.22.220.15 - [email protected] [05/Jan/2016:01:19:36 -0600] "GET HTTPS://XXX.allianceweb2.XXXX.com/AERWEB/dwr/interface/CheckPersonalizedOption.js;jsessionid=0000vYT... HTTP/1.1" 200 1319

[sundareshr · Accepted solution]

Try this, assuming the last for digits is response time,

.... | rex "\s(?<rt>\d+)$" | stats avg(rt) as response_time 

[manjunathin]

Hi again,

Need your help agin in figuring on how to get the statistics related to uri_path,count,response time.

I have another field called as uri_domain which has HTTPS://XXXXXX.com, can i get statistics related to uri_path,count,response time .

Thanks for your help again.

Manjunath

[sundareshr]

You should post that as a different question with details on what type of stats you are looking for. From this question, it is unclear what stats you need (min, max, avg, sum, count, dc etc) There are several option. You can read about it here http://docs.splunk.com/Documentation/Splunk/6.1/SearchReference/Commonstatsfunctions

[manjunathin]

Thanks the link helped to get an answer

[manjunathin]

Thanks sundaresh, appreciate your quick help on this