Splunk Search

how to draw a simple graph of response times against _time

edookati
Path Finder

I need to draw a simple graph of all the response times for a particular service in my application. I am using the below query for now, but i do not want average. I want all the response times on 'y' and _time on 'x' and the graph showing them. There are more than 1 call per second and avg doesn't actually represent the issue we are trying to resolve.
Thanks a lot.

index=jms_logs sourcetype=perflogs operation_name="RSA*" | timechart span=1s avg(response_time)

Tags (1)
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi edookati,

you can use either list or values within the timechart but if you really have multiple results within one second the graph could look strange. Nevertheless try something like this:

index=jms_logs sourcetype=perflogs operation_name="RSA*" | timechart span=1s list(response_time)

or

index=jms_logs sourcetype=perflogs operation_name="RSA*" | timechart span=1s values(response_time)

list will bring back all values and values only the distinct values for all events, see the docs for more details http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/CommonStatsFunctions

cheers, MuS

View solution in original post

MuS
SplunkTrust
SplunkTrust

Hi edookati,

you can use either list or values within the timechart but if you really have multiple results within one second the graph could look strange. Nevertheless try something like this:

index=jms_logs sourcetype=perflogs operation_name="RSA*" | timechart span=1s list(response_time)

or

index=jms_logs sourcetype=perflogs operation_name="RSA*" | timechart span=1s values(response_time)

list will bring back all values and values only the distinct values for all events, see the docs for more details http://docs.splunk.com/Documentation/Splunk/6.2.1/SearchReference/CommonStatsFunctions

cheers, MuS

View solution in original post

edookati
Path Finder

Pretty close to my requirement and thanks a lot. This will do for now 🙂

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.