Splunk Search

Response time, error count, transaction per second in one graph


I would like to get response time(95 percentile), error count and transaction per second in one graph timechart. This way I can check all details like at what point of tps the response time increases, error count increases etc.



currently i get the tps as follows


search all | eval count=1 | timechart per_second(count) as transactions_per_second


error count search -  NOT status="200"

response time - p95(Response_Time)


Labels (2)
0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!