I have a requirement to find the average duration taken by the SERVICE in a day.
Expected o/p1 for 1st service query:
DATE SERVICE AVERAGE(SEC)
2014-01-22 WORST 6.5 (calculation: 09+04/2(no of worst services)
Expected o/p2 for another service query:
DATE SERVICE AVERAGE(SEC)
2014-01-22 BEST 7.3 (calculation: 07+08+07/3(no of best service)
Here are some sample raw evens:
20140122T100510 SERVICE=WORST MESSAGE=REQ COUNTRY=USA ACCNO=1234
20140122T100513 SERVICE=WORST MESSAGE=RES COUNTRY=USA ACCNO=1234 TYPE=GOLD COUNT=1
20140122T100515 SERVICE=WORST MESSAGE=RES COUNTRY=USA ACCNO=1234 TYPE=GOLD COUNT=1
20140122T100516 SERVICE=WORST MESSAGE=RES COUNTRY=USA ACCNO=1234 TYPE=GOLD COUNT=0
20140122T100519 SERVICE=WORST MESSAGE=RES COUNTRY=USA ACCNO=1234 TYPE=GOLD COUNT=1 (20140122T100510-20140122T100519)=09sec
20140122T080520 SERVICE=WORST MESSAGE=REQ COUNTRY=USA ACCNO=1000
20140122T080524 SERVICE=WORST MESSAGE=RES COUNTRY=USA ACCNO=1000 TYPE=GOLD COUNT=0 (20140122T080520- 20140122T080520)=04sec
20140122T100514 SERVICE=BEST MESSAGE=REQ COUNTRY=USA ACCNO=1432
20140122T100515 SERVICE=BEST MESSAGE=RES COUNTRY=USA ACCNO=1432 TYPE=SILVER COUNT=1
20140122T100519 SERVICE=BEST MESSAGE=RES COUNTRY=USA ACCNO=1432 TYPE=SILVER COUNT=0
20140122T100521 SERVICE=BEST MESSAGE=RES COUNTRY=USA ACCNO=1432 TYPE=SILVER COUNT=1 (07sec)
20140122T100543 SERVICE=BEST MESSAGE=REQ COUNTRY=USA ACCNO=1256
20140122T100551 SERVICE=BEST MESSAGE=RES COUNTRY=USA ACCNO=1256 TYPE=SILVER COUNT=1 (08sec)
20140122T100545 SERVICE=BEST MESSAGE=REQ COUNTRY=USA ACCNO=1900
20140122T100552 SERVICE=BEST MESSAGE=RES COUNTRY=USA ACCNO=1900 TYPE=SILVER COUNT=1 (07sec)
The query I tried is:
Index= mmartin st=m01 host=defr4456 SERVICE=WORST |transaction SERVICE startswith=REQ endswith RES |timechart span=1d avg(duration) as AVERAGE(SEC)
(not getting proper results for this query)
any ideas??
Thanks..!!
-MARTIN
... View more