Splunk Search

display average hits per minute for each hour for a time range

jrich523
Path Finder

how do i show the average number of hits per minute for each hour?

basically i have a system that will, on peak hours, get between 60-80 hits a minute. what i'd like to see is for each hour (11am-12pm) show what the average hits/min is. sort of a nested average i guess.. and then show that for a day.

i wasnt even really sure what field to average so im not really off to a good start

Thanks

Tags (2)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

I'm assuming that your log data contains one entry per hit? If so, you can just do:

sourcetype=whatever | timechart span=1h count | eval hpm=count/60

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

I'm assuming that your log data contains one entry per hit? If so, you can just do:

sourcetype=whatever | timechart span=1h count | eval hpm=count/60
Get Updates on the Splunk Community!

ATTENTION!! We’re MOVING (not really)

Hey, all! In an effort to keep this Slack workspace secure and also to make our new members' experience easy, ...

Splunk Admins: Build a Smarter Stack with These Must-See .conf25 Sessions

  Whether you're running a complex Splunk deployment or just getting your bearings as a new admin, .conf25 ...

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...