Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About gowthamkb
gowthamkb
Explorer
Member since:
08-04-2016
06-05-2020
Community Statistics
| Posts | 19 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 08-04-2016 |
Activity Feed
- Got Karma for How to join customer ID data from different sources and create a time-based report where x-axis is total time and y-axis is total events?. 06-05-2020 12:48 AM
- Posted Re: how to create a chart with percentage ? on Dashboards & Visualizations. 09-28-2016 06:12 AM
- Posted Re: how to create a chart with percentage ? on Dashboards & Visualizations. 09-27-2016 02:39 PM
- Posted Re: how to create a chart with percentage ? on Dashboards & Visualizations. 09-27-2016 01:31 PM
- Posted Re: how to create a chart with percentage ? on Dashboards & Visualizations. 09-27-2016 12:09 PM
- Posted Re: how to create a chart with percentage ? on Dashboards & Visualizations. 09-27-2016 11:32 AM
- Posted Re: how to create a chart with percentage ? on Dashboards & Visualizations. 09-27-2016 11:03 AM
- Posted Re: how to create a chart with percentage ? on Dashboards & Visualizations. 09-27-2016 10:22 AM
- Posted Re: how to create a chart with percentage ? on Dashboards & Visualizations. 09-27-2016 10:13 AM
- Posted how to create a chart with percentage ? on Dashboards & Visualizations. 09-27-2016 09:50 AM
- Tagged how to create a chart with percentage ? on Dashboards & Visualizations. 09-27-2016 09:50 AM
- Posted Re: How do I create a chart with the x-axis as processing time for transactions and the y-axis as number of events? on Splunk Search. 09-27-2016 07:48 AM
- Posted Re: How to join customer ID data from different sources and create a time-based report where x-axis is total time and y-axis is total events? on Splunk Search. 09-22-2016 05:42 PM
- Posted Re: How to join customer ID data from different sources and create a time-based report where x-axis is total time and y-axis is total events? on Splunk Search. 09-22-2016 04:38 PM
- Posted Re: How to join customer ID data from different sources and create a time-based report where x-axis is total time and y-axis is total events? on Splunk Search. 09-22-2016 04:37 PM
- Posted How to join customer ID data from different sources and create a time-based report where x-axis is total time and y-axis is total events? on Splunk Search. 09-22-2016 02:25 PM
- Tagged How to join customer ID data from different sources and create a time-based report where x-axis is total time and y-axis is total events? on Splunk Search. 09-22-2016 02:25 PM
- Tagged How to join customer ID data from different sources and create a time-based report where x-axis is total time and y-axis is total events? on Splunk Search. 09-22-2016 02:25 PM
- Tagged How to join customer ID data from different sources and create a time-based report where x-axis is total time and y-axis is total events? on Splunk Search. 09-22-2016 02:25 PM
- Tagged How to join customer ID data from different sources and create a time-based report where x-axis is total time and y-axis is total events? on Splunk Search. 09-22-2016 02:25 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 0 | |||
| 0 |
09-28-2016
06:12 AM
Thank you !! The following command you gave what I wanted.
your current search giving field Location, Processing_time, trans_date
| bucket span=10 Processing_time
| stats count by trans_date Processing_time
| eventstats sum(count) as Total by trans_date
| eval Percent=round(count*100/Total,2)
| table trans_date, Processing_time Percent
| rename Processing_time as DurationBucket | xyseries trans_date DurationBucket Percent
... View more
09-27-2016
02:39 PM
Hi. With the above command I was able to get the average time with the overlay option but the columns are not stacked (even after selecting the stacked chart option). On a given date (trans_date) it is showing column for each DurationBucket.
... View more
09-27-2016
01:31 PM
Hi. Thanks a lot for guidance. With the stacked chart option I was able to merge the events to a single column per date. In the same chart, Is there a way in splunk to show a line which gives the average time (i.e average time taken by events on a given day) ?
... View more
09-27-2016
12:09 PM
Hi. it is working to an extent. It is giving me multiple columns on the graph per date. I actually want to get a single column on the chart per date and that column should be shown in buckets with event percents. In this case, we will have dual y-axis. left Y-axis will show the percent and the right y-axis will show the average time . Not sure if this can be done in splunk.
... View more
09-27-2016
11:32 AM
With the above command I am getting individual columns per date . I actually want a chart that shows the following . X-axis should show the date and the column should be divided by events percentage for a given day.
y-Axis (time buckets)
30 % 35%
20 % 26%
10 % 12%
X-Axis 09/25 09/26
... View more
09-27-2016
11:03 AM
hi. Thanks for above command. how can I tweak the above command to get total events for all day, so that I can view the percentage of events that are processed on a given day within timebucket (i.e 10% events processed in 0-10 mins, 25% events processed in 10-20 mins on 9/25/2016 (trans_date) and the same on 09/26/2016 (trans_date) etc)
... View more
09-27-2016
10:22 AM
based on count of events for that day. Thank you
... View more
09-27-2016
10:13 AM
Hi- following is the mock table
Trans_date DurationBucket Percent
9/21/2016 0-10Mins 10.35
9/22/2016 10-20 Mins 25.23
... View more
09-27-2016
09:50 AM
Location Processing Time (minutes) trans_date
Central 21 09/21/2016
South East 40 09/22/2016
Is there a way I can get a chart with time buckets , y-axis-primary showing percentage (transactions), y-axis secondary showing processing_time (0-10 mins, 10-20 mins etc) and x axis showing trans_date ?
... View more
- Tags:
- splunk-enterprise
09-27-2016
07:48 AM
Location Processing Time (minutes) trans_date
Central 21 09/21/2016
South East 40 09/22/2016
Is there a way I can get a bar chart with time buckets , y-axis-primary showing percentage (transactions), y-axis secondary showing processing_time (0-10 mins, 10-20 mins etc) and x axis showing trans_date ?
... View more
09-22-2016
05:42 PM
you are right. I want to get the total customers count. Thank you !!
... View more
09-22-2016
04:38 PM
Hi. Thank you. Your answer certainly helped me to get the desired o/p
... View more
09-22-2016
04:37 PM
Hi Mus. Thanks for sharing the link. it's helpful.
... View more
09-22-2016
02:25 PM
1 Karma
I want to correlate data from 2 sources. First data source contains store_events (source1=store_events) and second source contains book_events (source2=book_events). Source store_events contains a field called store_start_time and source book_events contains a field called store_end_time. Both sources contain a field called customerid.
How can I join the data based on customerid and create a report with my x-axis showing total_time (store_start_time + store_end_time) and y-axis showing total events ?
Any help is appreciated.
... View more
09-15-2016
09:51 AM
Location Processing Time (minutes)
----------- ---------------------------
Central 21.6
South East 27.4
How do I generate a report with my x-axis as 'Processing time' and y-axis as Number of events? With this report, I want to get the time taken by transactions. Any help is appreciated. Thanks in advance.
... View more
08-04-2016
02:06 PM
did u mean c_ip ? I have 7k+ lines in my log and all of them have the same s_ip.
can I assume that the count returned by the following search command is the total no of unique client visits on the website ?
sourcetype="iis" | dedup c_ip | stats dc(c_ip) AS Total_Unique_Client_IP
... View more
08-04-2016
01:24 PM
Thanks for the above reply. I checked my props.conf and I could see INDEXED_EXTRACTIONS=w3c .
After executing the following search command I got the count.
sourcetype="iis" | dedup c_ip | stats dc(c_ip) AS Total_Unique_Client_IP
How could I get the result set listing each Unique IP (c_ip) and the corresponding list of page visits (cs_uri_stem) made by that IP (c_ip) on the website.
Sorry I started using splunk 2 days ago and still trying to learn search commands. Any help will be appreciated.
... View more
08-04-2016
08:14 AM
sourcetype="iis". I could see the following fields
Interesting Fields
acs_method 1
acs_uri_stem 1
acs_User_Agent 1
adate 1
date_hour 21
date_mday 1
date_minute 60
adate_month 1
date_second 12
adate_wday 1
date_year 1
date_zone 1
aindex 1
linecount 1
apunct 1
as_ip 1
s_port 1
sc_status 1
sc_substatus 1
sc_win32_status 1
asplunk_server 1
atime 100+
time_taken 100+
... View more
