Splunk Search

How to identify the average time taken to process an item?

rwills2
New Member

I am trying to create a pareto chart. I have already done that portion of the work. I have been asked to identify a number of items in a specific page range as a part of the task. I did that, but I have been asked to find a way to identify the average time taken to process the number of items. To get a better understanding to say for example I have 736 items in 3 pages.

What function would I use to identify the amount of time per item?
Hopefully, that provides a better way to see what I am getting at.
Any input would be appreciated. Thank you in advance.

This is what I have so far this is not everything but the portion of the work I was mentioning above:

| eval overallTime=elapsedTime/1000
| eval processTimePerItem=overallTime/totalItems
| streamstats sum(processTimePerItem) as processTimePerITem by pageCount 
0 Karma

diogofgm
SplunkTrust
SplunkTrust

how does you raw data look like?

------------
Hope I was able to help you. If so, some karma would be appreciated.
0 Karma

rwills2
New Member

What I have in total:

assetGroup=* transId=* masterFeatureContext=* appName=deliveryrm pageCount > 2 (assetName=courier AND actionName=postJob) OR actionName=completeJob
| eval overallTime=elapsedTime/1000
| chart sum(numItems) as totalItems by pageCount
| sort - totalItems
| eventstats sum(totalItems) as total
| eval percent=round((totalItems/total)*100, 3)
| streamstats sum(percent) as percent_pareto
| streamstats sum(processTimePerItem) as processTimePerItem by pageCount
| eval processTimePerItem=overallTime/totalItems
| fields pageCount totalItems percent_pareto processTimePerPage

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...