About rj1408

rj1408 · ‎03-23-2021

Any other vizualization that can tell me total, success and failure?

rj1408 · ‎03-21-2021

Hi anyone? Ill again repost if the question isnt clear

rj1408 · ‎03-16-2021

@ITWhisperer

rj1408 · ‎03-16-2021

base search | stats dc(TransactionID),count(StatusSuccess), count(StatusFailure) as count by MainMethod |rename MainMethod as MicroService count(StatusSuccess) as Success count as Failed | replace LostStolen with LostandStolen RetailConversion with TransactionRetailConversion TempCreditLimit with TemporaryCreditLimitIncrease Hi, in the above query I want to add pie chart as visualization, right now in pie chart it is only showing the no of transactions hit per function and ignoring the Success and Failed status. What i want is when I hover over the functions in piechart I want to see the no Failed and Sucess Tranactions. How do i do that?

rj1408 · ‎02-25-2021

Hi All, I want to always hide my drop down <input type="dropdown" token="TransactionID_filter" searchWhenChanged="true"> <label>TransactionID</label> <fieldForLabel>ESMS_TransactionID</fieldForLabel> <fieldForValue>ESMS_TransactionID</fieldForValue> <search> <query>index="int_gcg_apac_pcf_application_dm_169688" cf_org_name="CM-AP-SIT2" cf_space_name="166190_GCESMS" | table ESMS_TransactionID | dedup ESMS_TransactionID</query> <earliest>$timepicker.earliest$</earliest> <latest>$timepicker.latest$</latest> </search> <choice value="*">All</choice> </input>

rj1408 · ‎01-18-2021

Hi, with perc90(responseTime), I'm unable to get avg of the response time with only top 90 response time out of 100 which is 90th percentile avg response time.

rj1408 · ‎01-18-2021

Thanks! Can u help me with this one- https://community.splunk.com/t5/Splunk-Search/90th-percentile/m-p/534296#M150983

rj1408 · ‎01-18-2021

Hi I want to calculate Min and Max Response time only if the status is success. Below is the table format: MicroService Total_Transaction Success Failure Avg Failure% Success% Min_Response_Time Max_Response_time LostStolenCard 7 5 2 5223 28.57 71.43 CreditLimit 15 0 15 4324 0 100

rj1408 · ‎01-18-2021

Hi Its still same issue, it is replecting from the first row, and it copies until the last row!

rj1408 · ‎12-23-2020

Hi I need to find 90th percentage avg, I tried by this way base search| mainMethod=LostStolen OR mainMethod=CreditLimit OR mainMethod=LoanCreation| stats max(ResponseTime) avg(ResponseTime) as count by mainMethod| eventstats perc90(avg) I'm getting like this mainMethod Max avg(ResponseTime) Avg(90p) LostStolen 2000 1900 1834 CreditLimit 1800 1734 1834 LoanCreation 1925 1867 1834 The avg 90p is replicating from the first and if I add in eventstats as count by clause it throws error

rj1408 · ‎12-10-2020

@ITWhisperer Thankyou! 🙂

rj1408 · ‎12-10-2020

@aohls Hi, thanks for your help. I more help, in IMG-1, if the user clicks on "Total_Transaction", how will I change the column name value which is "Total_Transaction" to "*" so that I can get a list of the Transaction irrespective of Fail/Success, tried using eval replace, but its not working. base query | table ESMS_TransactionID,ESMS_Country, ESMS_ResponseTime, ESMS_MS, ESMS_StatusFailure, ESMS_StatusSuccess| eval ESMS_StatusSuccess= replace(ESMS_StatusSuccess,"Total_Transaction","*")| search ESMS_StatusSuccess=Total_Transaction ESMS_StatusFailure=Total_Transaction

rj1408 · ‎12-10-2020

@ITWhisperer

rj1408 · ‎12-10-2020

Hi ITWhisperer, Have used this So here Im using drilldown to get this table from the above table: The problem is if I click on the "Total_Transaction" I'm unable to change the value to "*", to show all the TransactionIDs. Also can u suggest me how to hide rows alternatively whenever any of the two rows StausFailure/StatusSucces is completyly empty My dashboard: <row> <panel> <title>MicroServices</title> <table> <title>The Succes Error Percentage</title> <search> <query>index="int_gcg_apac_pcf_application_dm_169688" cf_org_name="CM-AP-SIT2" cf_space_name="166190_GCESMS" ESMS_MainMethod=doLostStolen OR ESMS_MainMethod=saveReqest OR ESMS_MainMethod=updateTempCreditLimit |stats dc(ESMS_TransactionID), sum(ESMS_ResponseTime), count(ESMS_StatusSuccess), count(ESMS_StatusFailure) as count by ESMS_MainMethod | rename ESMS_MainMethod as MicroService dc(ESMS_TransactionID) as Total_Transaction sum(ESMS_ResponseTime) as Total_Time count(ESMS_StatusSuccess) as Sucess count as Failure | eval "Success%"=((Success/Total_Transaction)*100) , "Failure%"=((Failure/Total_Transaction)*100), "Avg"=(Total_Time/Total_Transaction) | replace loadCardProfile1 with ESMS_CardProfile processCriteria with ESMS_GBCR saveReqest with ESMS_DB_Service doLostStolen with ESMS_LostStolen_Service doRetailConversion with ESMS_RetailConversion updateTempCreditLimit with ESMS_TempCreditLimit_Service</query> <earliest>$timepicker.earliest$</earliest> <latest>$timepicker.latest$</latest> <sampleRatio>1</sampleRatio> </search> <option name="count">100</option> <option name="dataOverlayMode">none</option> <option name="drilldown">cell</option> <option name="percentagesRow">false</option> <option name="refresh.display">progressbar</option> <option name="rowNumbers">true</option> <option name="totalsRow">false</option> <option name="wrap">true</option> <drilldown> <set token="form.MS_filter">$click.value$</set> <set token="clicked_col">$click.name2$</set> </drilldown> </table> </panel> </row> <row> <panel> <title>TransactionIDs</title> <table> <title>$MS_filter$</title> <search> <query>index="int_gcg_apac_pcf_application_dm_169688" cf_org_name="CM-AP-SIT2" cf_space_name="166190_GCESMS" ESMS_MS=$form.MS_filter$ ESMS_MainMethod=doLostStolen OR ESMS_MainMethod= loadCardProfile1 OR ESMS_MainMethod=processCriteria OR ESMS_MainMethod=saveReqest OR ESMS_MainMethod=updateTempCreditLimit ESMS_StatusSuccess=$clicked_col$ OR ESMS_StatusFailure=$clicked_col$ | table ESMS_TransactionID,ESMS_Country, ESMS_ResponseTime, ESMS_MS, ESMS_StatusFailure, ESMS_StatusSuccess</query> <earliest>$timepicker.earliest$</earliest> <latest>$timepicker.latest$</latest> <sampleRatio>1</sampleRatio> </search> <option name="count">100</option> <option name="dataOverlayMode">none</option> <option name="drilldown">cell</option> <option name="percentagesRow">false</option> <option name="refresh.display">progressbar</option> <option name="rowNumbers">true</option> <option name="totalsRow">false</option> <option name="wrap">true</option> <drilldown> <set token="form.TransactionID_filter">$click.value$</set> </drilldown> </table> </panel> </row>

rj1408 · ‎12-10-2020

Hi , So if I click at Success/Failure I'm able to get all the transaction IDs which have status Success/Failure, But if i chose Total_Transaction I'm unable to change it to "*" using eval. Below is the query, Im using drilldown for column name and column value, since its taking column value as Total_Transaction its unable to trace to *. Need help with the eval if query. Query- index="int_gcg_apac_pcf_application_dm_169688" cf_org_name="CM-AP-SIT2" cf_space_name="166190_GCESMS" ESMS_MainMethod=doLostStolen OR ESMS_MainMethod=saveReqest OR ESMS_MainMethod=updateTempCreditLimit |stats dc(ESMS_TransactionID), sum(ESMS_ResponseTime), count(ESMS_StatusSuccess), count(ESMS_StatusFailure) as count by ESMS_MainMethod | rename ESMS_MainMethod as MicroService dc(ESMS_TransactionID) as Total_Transaction sum(ESMS_ResponseTime) as Total_Time count(ESMS_StatusSuccess) as Sucess count as Failure | eval "Success%"=((Success/Total_Transaction)*100) , "Failure%"=((Failure/Total_Transaction)*100), "Avg"=(Total_Time/Total_Transaction) | replace loadCardProfile1 with ESMS_CardProfile processCriteria with ESMS_GBCR saveReqest with ESMS_DB_Service doLostStolen with ESMS_LostStolen_Service doRetailConversion with ESMS_RetailConversion updateTempCreditLimit with ESMS_TempCreditLimit_Service

rj1408 · ‎12-10-2020

Hi, Img-1 Img-2 What I want is- In Img1, when I click on Sucess/Failure/Total_Transaction column value, I want a change with respect to Microservices transaction in img 2, so for example if I click on LostStolen Services for Failure column which has 35 as value, In the next table I want it to print all those 35 transaction ids with status. NOTE: Here for Success & failure, I have used different flags to count. Could not figure out to use same flag for 2 different column to count.

Posts	16
Solutions	0
Karma Given	6
Karma Received	0
Member Since	‎12-10-2020

Online Status	Offline
Date Last Visited	‎03-24-2021 03:05 PM

Pie chart show values section wise

Hide Drop Down

Min and Max Response Time

90th percentile

To change the column value in query using eval or ...

Splunk Table Drilldown by column name

Re: Pie chart show values section wise

Re: Pie chart show values section wise

Re: Pie chart show values section wise

Pie chart show values section wise

Hide Drop Down

Re: 90th percentile

Re: Min and Max Respinse Time

Min and Max Response Time

Re: 90th percentile

90th percentile

Re: To change the column value in query using eval...

Re: Splunk Table Drilldown by column name

Re: To change the column value in query using eval...

Re: To change the column value in query using eval...

To change the column value in query using eval or ...

Splunk Table Drilldown by column name