Hi there,
This should be a pretty simple question. I have looked around for a while. We have a web log we are trying to do some analysis on.
I would like to plot all the events in the last 4 hours (very low volume) and see the response time graph.
The response time field is called ms and it's in milliseconds (ms=185).
Help please.
Thank you!
You could use table or timechart commands to format the data for graphing.
... | table _time,ms
... | timechart avg(ms) min(ms) max(ms)
If you provide a sample of your logs I could probably give a better example.
Thank you!!!
'| table _time,ms
" worked perfectly. I really appreciate the help
Here is a line from the log. This is from a Google App Engine (GAE) log.
/something/whatwhat?longitude=-118.4521985707045&latitude=33.99926074318029&storePin=blahblah HTTP/1.1" 200 495 - "blah.dev/1000 CFNetwork/548.1.4 Darwin/11.0.0" "blahblah.appspot.com" ms=176 cpu_ms=38 api_cpu_ms=38 cpm_usd=0.001345 instance=blahblahblah
You could use table or timechart commands to format the data for graphing.
... | table _time,ms
... | timechart avg(ms) min(ms) max(ms)
If you provide a sample of your logs I could probably give a better example.