- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
List last one month peak traffic time
Hi,
Here is my query, It works fine for one day , but if i change the custom time like last one month data , then it is not showing last one month data, instead it show cumulative of intergers
i'm trying to get peak connections (connection/sec) for last one month.
Could any one please help me in this.
Stats comes for every 10 mins, so i divided/600 in order convert to seconds
index="rrs_interval_summary" HOST=*shsrrs* | stats max(RRShttpConnections) as RRS_HTTP_CONNECTIONS by HOST |eval peak=RRS_HTTP_CONNECTIONS/600 |stats sum(peak) as peak
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

If you're trying to get peak connection per second for a given period (a month in your case), simple use max without the "by HOST" clause.
index="rrs_interval_summary" HOST=*shsrrs* | stats max(RRShttpConnections) as RRS_HTTP_CONNECTIONS |eval peak=RRS_HTTP_CONNECTIONS/600
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Stats is returning single value.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

But he wont be able to plot all points on chart.. Isn't there a limit of 1000 points.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Do you want peak value in last 1 month by host? you can try like this (added by HOST at the end)
index="rrs_interval_summary" HOST=*shsrrs* | stats max(RRShttpConnections) as RRS_HTTP_CONNECTIONS by HOST |eval peak=RRS_HTTP_CONNECTIONS/600 |stats sum(peak) as peak by HOST
or else you can try like below to know peak of all hosts
stats sum(peak) as peak
