Yes @ITWhisperer, i have extracted all TRN, tomcatget, Queue, TimeMQPut, Status, and Priority.
you're right tomcatput=TimeMQPut, ignore about the status am not using it for the response time calcul...
See more...
Yes @ITWhisperer, i have extracted all TRN, tomcatget, Queue, TimeMQPut, Status, and Priority.
you're right tomcatput=TimeMQPut, ignore about the status am not using it for the response time calculation.
Splunk query which i shared has response time.
| eval E2E_5min=if(tomcatGet2tomcatPut<=300,1,0)
| eval E2E_20min=if(tomcatGet2tomcatPut>300 and tomcatGet2tomcatPut<=1200,1,0)
| eval E2E_50min=if(tomcatGet2tomcatPut>1200 and tomcatGet2tomcatPut<=3000,1,0)
| eval E2EGT50min=if(tomcatGet2tomcatPut>3000,1,0)
| eval Total = E2E_5min + E2E_20min + E2E_50min + E2EGT50min
| stats sum(E2E_5min) as sum_5min sum(E2E_20min) as sum_20min sum(E2E_50min) as sum_50min sum(E2EGT50min) as sum_50GTmin sum(Total) as sum_total by Priority
This will give below output.
Now am creating a field called good and adding adding a condition. If priority is High then it should be in sum_5min if priority is medium then it should be in sum_20min, so adding sum_5min + sum_20min If priority is High then it should be in sum_50min, so adding sum_5min + sum_20min + sum_50min
| eval good = if(Priority="High", sum_5min, if(Priority="Medium", sum_5min + sum_20min, if(Priority="Low", sum_5min+ sum_20min + sum_50min, null())))
After getting the good field data, now am calculating percentage of success which display in a table format
When i try a timechart it doesnt work as expected.
timechart span=1d avg(per_cal) by Priority
Gives me output no results found.