Min and Max Response Time

[rj1408]

Hi I want to calculate Min and Max Response time only if the status is success.

Below is the table format:

MicroService	Total_Transaction	Success	Failure	Avg	Failure%	Success%	Min_Response_Time	Max_Response_time
LostStolenCard	7	5	2	5223	28.57	71.43
CreditLimit	15	0	15	4324	0	100

[richgalloway]

You can calculate the numbers then delete them if the status is not success.

... | stats min(ResponseTime) as Min_Response_Time, max(ResponseTime) as Max_Response_Time by MicroService
| eval Min_Response_Time=if(Status=0,null,Min_Response_Time), Max_Response_Time=if(Status=0,null, Max_Response_Time)

[ITWhisperer · Accepted solution]

| eval successTime = if(staus="Success", responseTime, null)
| stats max(successTime) as Max_Response_time min(successTime) as Min_Response_Time by MicroService

[rj1408]

Thanks!

Can u help me with this one- 
https://community.splunk.com/t5/Splunk-Search/90th-percentile/m-p/534296#M150983