Splunk Search

95% percentile of the transaction duration

mfritsch
New Member

Hello

I'd like to display the 95% percentile of the transaction duration. Any hint how I can do this?
This is my current search.

host=server1 | rename CorrelationId AS CDI | transaction CDI |table CDI duration

Best,
Manuel

0 Karma

cmerriman
Super Champion

could you try doing:

host=server1 | rename CorrelationId AS CDI | transaction CDI|stats perc95(duration)
0 Karma
Get Updates on the Splunk Community!

Data-Driven Success: Splunk & Financial Services

Splunk streamlines the process of extracting insights from large volumes of data. In this fast-paced world, ...

Video | Welcome Back to Smartness, Pedro

Remember Splunk Community member, Pedro Borges? If you tuned into Episode 2 of our Smartness interview series, ...

Detector Best Practices: Static Thresholds

Introduction In observability monitoring, static thresholds are used to monitor fixed, known values within ...