Hello,
I have deployed splunk essentials for Application analytics under splunk 7.2.4(trial version)
I tried to configure the use case - Application Content / Identify Slow Web Pages which is part of the examples under the app.
Upon the ingestion of web server access logs, i ran the following command given under the example.
sourcetype="access_common"
| stats avg(response_time) as art by uri_path
| eval "Average Response Time (ms)" = round(art,2)
| sort -"Average Response Time (ms)"
| table uri_path "Average Response Time (ms)"
I'm unable to see Average Response entries under statistics.
A sample Extract from logs below.
06/02/2019
23:58:59.000
10.150.19.125 - - [06/Feb/2019:23:58:59 +0530] "GET /itpam/StartAgent?processType=startAgent≺ocess=startAgentpam.agent.httpscompatible=false&AGENT_STARTUP_VERSION=1&DeprecatedComms=true&requestType=launchagent HTTP/1.1" 404 1097
host = source = localhost_access_log.2019-02-06.txt sourcetype = access_common
06/02/2019
23:57:30.000
10.150.19.125 - - [06/Feb/2019:23:57:30 +0530] "GET /itpam/StartAgent?processType=startAgent≺ocess=startAgentpam.agent.httpscompatible=false&AGENT_STARTUP_VERSION=1&DeprecatedComms=true&requestType=launchagent HTTP/1.1" 404 1097
host = * source = localhost_access_log.2019-02-06.txt sourcetype = access_common
... View more