Splunk Search

How to create a dashboard using graph from response time count of application logs?

Amol1300
New Member

Hi Team,

 

I wanted to count response time for each hours from application logs, wanted to create dashboard using line graph

Please find below app logs

{"TIMESTAMP":"2022-09-29 T11:31:49.038 GMT'Z","MESSAGE":"response=","LOGGER":"com.fedex.cds.ws.PerfInterceptor","THREAD":"http-nio-8080-exec-2089","LOG_LEVEL":"DEBUG","DataCenter":"1","EndUserId":"APP943415","Stanza":"etnmsMasterSubRangeStanza","ResponseTime":"268","Operation":"queryByIndex","Domain":"etnms","EAI":"APP943415","TransactionId":"ecd29878-e4f9-48db-ab29-a7fa98ba6be7","EAI_NAME":"cds","EAI_NBR":"APP943415"}

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

as this is a valid JSON you can try

<your base search>
| spath
| timechart span=1h sum(ResponseTime) as totalRT

then select from Visualisation line chart and save as a dashboard.

r. Ismo 

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...