Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About iberecamara
iberecamara
Engager
Member since:
07-20-2018
06-05-2020
Community Statistics
| Posts | 8 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 07-20-2018 |
Activity Feed
- Karma Re: Transaction very slow for somesoni2. 06-05-2020 12:49 AM
- Posted Re: Transaction very slow on Splunk Search. 07-20-2018 09:47 AM
- Posted Re: Transaction very slow on Splunk Search. 07-20-2018 08:39 AM
- Posted Re: Transaction very slow on Splunk Search. 07-20-2018 08:31 AM
- Posted Re: Transaction very slow on Splunk Search. 07-20-2018 07:31 AM
- Posted Re: Transaction very slow on Splunk Search. 07-20-2018 06:58 AM
- Posted Re: Transaction very slow on Splunk Search. 07-20-2018 06:12 AM
- Posted Re: Transaction very slow on Splunk Search. 07-20-2018 05:59 AM
- Posted Transaction very slow on Splunk Search. 07-20-2018 05:20 AM
- Tagged Transaction very slow on Splunk Search. 07-20-2018 05:20 AM
- Tagged Transaction very slow on Splunk Search. 07-20-2018 05:20 AM
- Tagged Transaction very slow on Splunk Search. 07-20-2018 05:20 AM
- Tagged Transaction very slow on Splunk Search. 07-20-2018 05:20 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 |
07-20-2018
09:47 AM
I just had to remove the connected=true, but it seems that it works. I'm in the middle of a meeting right now, but I'll make some tests when I can, and if it doesn't break for different time ranges, I'll accept this as the answer, thank you very much!
... View more
07-20-2018
08:31 AM
Yes, I do. It gives me the app1ResponseTime, no_of_perf_type and status for the matches in TXN_ID and COR_ID
... View more
07-20-2018
07:31 AM
The results are different from mine. My search is returning a couple matches and generating a line chart as intended, but this search returns "No results found."
... View more
07-20-2018
06:58 AM
@renjith.nair
It errors trying to run the search.
Error in 'stats' command: The aggregation specifier 'dc(PERF_TYPE) no_of_perf_type' is invalid. The aggregation specifier must be in func_name format.
... View more
07-20-2018
06:12 AM
I'm looking for response times from App1PerformanceMetrics and App2PerformanceMetrics, so I can eval them later for the real response time I want (app1ResponseTime - app2ResponseTime). I know the parens don't help at all, I like to use them as a visual aid.
I'm already using an index, I updated the search here.
... View more
07-20-2018
05:59 AM
I know that I should narrow as much as possible before doing the transaction, but unfortunately no. The eventcount is a direct effect of the transaction, and the status=SUCCESS is only present in App1PerformanceMetrics.
... View more
07-20-2018
05:20 AM
I have to calculate the response time from an application that depends on the response of another application. For that, I need to get the response times from both and calculate. The response time from Application1 and Application2 are in different places, but they share a couple of unique fields. I'm using a transaction for this right now, but its being very very slow, can someone help me refactor this? The search string is below, thanks!
index=myindex source=mysource sourcetype=mysourcetype host=myhost CLASS=PERFORMANCE_LOG (PERF_TYPE=App1PerformanceMetrics OR PERF_TYPE=App2PerformanceMetrics)
| transaction TXN_ID COR_ID connected=true
| search eventcount=2 status=SUCCESS
| eval responseTime = app1ResponseTime - app2ResponseTime
| timechart avg(responseTime)
... View more
