I ran that command against the last 24 hour and it's still just grabbing the values from the last run of the script ... View more

top and bottom of the screen just so you see what i'm talking about ... View more

the last 24 hour one is still showing the single value of the last run of the script ... View more

how do you explain the first screen where I have the timepicker at last 24 hour? Sorry, just trying to understand this better so i can fully explain the limitations to my bosses. Thanks for all the help ... View more

here's screen shots of changing the span to 30mins and doing both 24hrs and 60 mins. Still doing the same...pulling the last entry as the average ... View more

only option is to probably run the script more frequently, right? ... View more

any suggestions on how to change that? how to get the search to display the true avg? ... View more

I ran | eval Response_Time=(Login_Response+QuickSearch_Response+Recruiter_Response) | timechart span=15m avg(Response_Time) AS avg and | eval Response_Time=(Login_Response+QuickSearch_Response+Recruiter_Response) | timechart span=15m last(Response_Time) AS avg and I get the same single value for both searches when I match the timepicker range ... View more

yup...in the UI the single value that it returns every single time is the most recent response time. So it matches the value of the last time the script ran no matter what the time picker is set to ... View more

if we can get it chart over time then everything else will fall into place 🙂 ... View more

Ok...I'm with you so far. It's working, now the important part of this whole thng. How do you timechart this or do a chart over time? When I do a | timechart values(avg) or | chart values(avg) over _time...i don't get back any results. That's what I've been trying to figure out this whole time :). the ability to post screen shots would have been helpful in this whole process 🙂 ... View more

thanks cramasta I still don't think this is going to do what I need it to do. Let's forget about the compare. Do you have any suggestions on just a search that gives me a timechart or chart over time of the average total response time based on the entire timeframe selected in the timerange picker? Thanks again ... View more

yes, that's correct...the trend indicators are set to compare the same time frame from the timepicker from 7 days ago. The trend indicators, compare to, colors and thresholds are all set up in the single value chart settings in the dashboard panel so we don't really need to worry about it in the search or the chart command in the search. I just need to be able to build a search that charts the avg total response over time (using the time frame in the timepicker) Sorry about all the confusion 🙂 ... View more

bascially...the script runs every 15 mins so they want to be able to choose any timeframe in the timepicker and have the value dynamically change to the average total response time of that timeframe as they pick the timerange in the timepicker ... View more

not really... I have the trend compare to the last 7 days and they want to do an average of the chosen time frame in the timepicker input ... View more

I was able to accomplish that in another dashboard just showing that one value by using this search: | stats count by QuickSearch_Status,QuickSearch_Response,Recruiter_Response | eval Response_Time=(Login_Response+QuickSearch_Response+Recruiter_Response) | table Response_Time But now they want me to do a single value panel with colors and trends showing the value and having it change related to the time range in the time picker. I know that means I have to add the timechart or chart by time for trending to be available and that's where I'm stuck ... View more

ok...that makes sense in regard to the span being 15mins and whey the value is the same. So the value wanted is the avg response time of the selected time frame of the time picker. So if they choose the last 4 hours then we get an avg of the response time for the last 4 hours (sum of all the response times divided by the 16 events in that time frame). ... View more

the single value chart is showing 4.845 for both time ranges ... View more