About pdpsplunk100

Splunk_321 · ‎02-27-2024

@pdpsplunk100 @sundareshr @ppablo Is there any update for achieving the same in splunk 9.0.5.1 version?

pdpsplunk100 · ‎09-09-2016

This did the trick. index=xxx (source=/x/x/x/process_log AND request_param=xxx) | rename responseTime as processTime | timechart avg(processTime) as "Processing Time" | join _time [search index=xxx (source=/x/x/x/localhost_access_log* AND request_param=yyy) | timechart avg(responseTime) as "Response Time"]

pdpsplunk100 · ‎08-16-2016

Does exactly what I was looking for. Thanks a bunch! The only thing is, its slow to load when the time range is > 4 hours. I came across summary indexing which may help with performance I think. I will try to explore that. But this is great, thanks again.

Posts	12
Solutions	1
Karma Given	3
Karma Received	1
Member Since	‎08-16-2016

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Need help combining 2 separate searches on differe...

How to dynamically show/hide a dashboard panel bas...

How to plot requests per second for each service o...

Re: How to dynamically show/hide a dashboard panel...

Re: Need help combining 2 separate searches on dif...

Re: How to plot requests per second for each servi...

Are you a member of the Splunk Community?