I have a time column with time taken to process the file and I need to create a dashboard with chart to display the avg time. If the time taken to process the file increase it should show a spike in the chart.
I have tried
{table search} | bucket _time span=1d | stats avg(ProcessingTime) as AvgTime by _time
But it returns null.
Could you please help?
Thanks
Assuming that the field ProcessingTime is present in your data, you can just do this instead of the stats
{table search}
|timechart span=1d avg(ProcessingTime) as AvgTime
NOTE: Field names are case sensitive
Thanks for the reply. But I get 'No results found.'
Tried this
chart values(ProcessingTime) as AvgTime by FileName
it gives me results but the avgTime is 0 for all
HI, There may be no ProcessingTime field
we are calculating the processing time as difference of two time fields and it is in the tables search with results