Plot Response Time Events from Web Log

[zloc]

Hi there,

This should be a pretty simple question. I have looked around for a while. We have a web log we are trying to do some analysis on.

I would like to plot all the events in the last 4 hours (very low volume) and see the response time graph.

The response time field is called ms and it's in milliseconds (ms=185).

Help please.

Thank you!

[zloc]

Thank you!!!

'| table _time,ms" worked perfectly. I really appreciate the help

Here is a line from the log. This is from a Google App Engine (GAE) log.

/something/whatwhat?longitude=-118.4521985707045&latitude=33.99926074318029&storePin=blahblah HTTP/1.1" 200 495 - "blah.dev/1000 CFNetwork/548.1.4 Darwin/11.0.0" "blahblah.appspot.com" ms=176 cpu_ms=38 api_cpu_ms=38 cpm_usd=0.001345 instance=blahblahblah

[Damien_Dallimor · Accepted solution]

You could use table or timechart commands to format the data for graphing.

... | table _time,ms
... | timechart avg(ms) min(ms) max(ms)

If you provide a sample of your logs I could probably give a better example.