I need a table which gives me both perc95(response_time) and avg(response_time) by service_name
I am using the below query, but is giving me some weird results...
index=jms_logs sourcetype=perflogs | eventstats perc95(response_time) as response_time_95p, avg(response_time) as avgRespTime | stats by service_name
can someone please help me?
Thanks.
Try this
index=jms_logs sourcetype=perflogs | stats perc95(response_time) as response_time_95p, avg(response_time) as avgRespTime by service_name
Try this
index=jms_logs sourcetype=perflogs | stats perc95(response_time) as response_time_95p, avg(response_time) as avgRespTime by service_name
thanks. It worked just great.