Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About pszabo75
pszabo75
Loves-to-Learn Lots
Member since:
09-02-2020
09-09-2020
Community Statistics
| Posts | 8 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 09-02-2020 |
Activity Feed
- Posted Re: Avg disappears if I add min and max on Splunk Search. 09-09-2020 11:20 AM
- Posted Re: Avg disappears if I add min and max on Splunk Search. 09-08-2020 09:02 AM
- Posted Re: Avg disappears if I add min and max on Splunk Search. 09-03-2020 08:15 AM
- Posted Re: Avg disappears if I add min and max on Splunk Search. 09-03-2020 08:12 AM
- Posted Re: Avg disappears if I add min and max on Splunk Search. 09-02-2020 02:15 PM
- Posted Re: Avg disappears if I add min and max on Splunk Search. 09-02-2020 01:11 PM
- Posted Re: Avg disappears if I add min and max on Splunk Search. 09-02-2020 11:23 AM
- Posted Avg disappears if I add min and max, so how do I combine avg, min, and max together to have all the stats I need? on Splunk Search. 09-02-2020 09:45 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 |
09-09-2020
11:20 AM
Yeah, everyone seems to run out of ideas so I guess I don't have any other option. Thank you for the help.
... View more
09-08-2020
09:02 AM
This is the whole query: index="log-39337-prod-c" laas_appId="gitscm.stash*-bitbucket-access" status=200 username!=" - " labels!=" - "
| fields labels, response_time, action, laas_appId
| rex field=laas_appId "gitscm.(?<instance>(.*))-bitbucket-access"
| rex field=labels ".+(?<operation>refs|fetch|push|clone|archive)"
| search operation=clone
| rex field=action ".+\/scm\/(?<repository>.+)\.git.+"
| stats min(response_time) as minimum, max(response_time) as maximum, avg(response_time) as average by repository
... View more
09-03-2020
08:15 AM
It's Splunk 8.0.1. I don't know the OS but most likely our firm's RHEL 7 based internal Linux build
... View more
09-02-2020
02:15 PM
Did you mean something like this? | eval resp_time=tonumber(response_time)
| stats min(resp_time) as minimum, max(resp_time) as maximum, avg(resp_time) as average by repository With this search I don't have any results, not even the min and max values. And don't forget that avg is only empty if I add min and max to the search. Without min and max I have average. I also examined the events and I can see this if I select the response_time field: I think response_time is definitely number.
... View more
09-02-2020
01:11 PM
My original stats command looked like this and it didn't work: | stats min(response_time) as min_response_time, max(response_time) as max_response_time, avg(response_time) as avg_response_time by repository However I tested it once again, and confirmed that it doesn't help.
... View more
09-02-2020
11:23 AM
No, that doesn't help. In fact, that was my initial version and I removed the commas because I saw examples without them here in the forum.
... View more
09-02-2020
09:45 AM
I have events with response_time fields coming from an access log file. I have to display the average, min, and max response times sorted by another field called repository. My search looks like this:
<base_search>
| stats min(response_time) as min max(response_time) as max avg(response_time) as avg by repository
The average column is empty while I have min and max calculated correctly.
Now, if I remove min and max from my stats command average is calculated as expected. The response_time field is numeric.
How do I combine avg, min, and max together to have all the stats that I need?
... View more
Labels
- Labels:
-
stats
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-09-2020
03:56 AM
|
