About appusplunk14

appusplunk14 · ‎12-31-2020

any update on peakTime?

appusplunk14 · ‎12-31-2020

given query is displaying data like below: 2020-12-31 10:00 108.77 56.91 1835 143 2020-12-31 11:00 109.00 54.49 2167 119 2020-12-31 12:00 110.47 56.49 1823 131 as i said we want to display time during which we had high number of events in that hour.

appusplunk14 · ‎12-29-2020

consider if i see peak TPS at 08:00 AM MST then i would like to print time stamp for that duration.

appusplunk14 · ‎12-28-2020

thank you , its working good but i would like to include peakTime for both different search criteria , how do i do that? and what exactly untable means ? why are we using untable in this requirement?

appusplunk14 · ‎12-28-2020

Team, i would like to generate TPS based on two different search criteria but both has to run single report and should be populate both TPS values in single report. Query 1: index=abc "String 1" | bin _time span=1s | chart count as TPS by _time | timechart max(TPS) as peakTPS eval(round(avg(TPS),2)) as avgTPS span=1h Query 2: index=abc "String1" OR "String 2" | bin _time span=1s | chart count as TPS by _time | timechart max(TPS) as peakTPS eval(round(avg(TPS),2)) as avgTPS span=1h Here query 1 finds TPS and Peak TPS based on one particular string and query 2 find TPS , Peak TPS based on string which i used on query 1 and another string on top of it. Now i would like to get merge both of then in single query so that one single report is enough for providing metrics

appusplunk14 · ‎12-28-2020

can you please help me to update query to get peak time as well ?

appusplunk14 · ‎12-28-2020

thanks it worked , i would like to print peak time as well , is that possible?

appusplunk14 · ‎12-22-2020

How to get same values for every one hour in last 24 hours time frame?

appusplunk14 · ‎12-22-2020

i am trying to find out peakTPS for every one hour in last 24 hours duration, i have below query but thats giving peak TPS only for one hour , how do i run that loop that query for entire 24 hours duration but need results for every one hour. index=whatever |timechart span=1s count AS TPS avg(RT) as Avg_RT | eventstats max(TPS) as peakTPS | eval peakTime=if(peakTPS==TPS,_time,null()) | stats avg(TPS) as avgTPS first(peakTPS) as peakTPS first(peakTime) as peakTime |eval peakTPS=round(peakTPS,2), avgTPS=round(avgTPS,2) |table avgTPS peakTPS peakTime |convert timeformat="%Y-%m-%d %H:%M:%S %Z" ctime(peakTime) as peakTime

Posts	9
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎12-22-2020

Online Status	Offline
Date Last Visited	‎12-31-2020 05:51 PM

multiple splunk search queries

peakTPS for every one hour in last 24 hours

Re: peakTPS for every one hour in last 24 hours

Re: multiple splunk search queries

Re: multiple splunk search queries

Re: multiple splunk search queries

multiple splunk search queries

Re: peakTPS for every one hour in last 24 hours

Re: peakTPS for every one hour in last 24 hours

Re: How to get peak and average TPS for all the se...

peakTPS for every one hour in last 24 hours