Sorting data peaks

buddhamagnet · ‎09-17-2013

Hi all. We are in the process of analysing some data to locate peaks in order to send requests per second thresholds to potential vendors. What we want to do is sort all data based on the peaks. Does anyone know how to do this?

The current peak we have located is 95 requests in a second and we would like to sort data by this kind of peak.

gfuente · ‎09-17-2013

Hello

Try this:

...| bin _time span=1s | stats count by _time | sort - count

Regards

Sorting data peaks

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

SplunkTrust Application Period is Officially OPEN!

Join the Conversation

Sorting data peaks

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

SplunkTrust Application Period is Officially OPEN!