Dashboards & Visualizations

timechart to display avg time taken by a file and spike it when the processing time increases

gravi
Explorer

I have a time column with time taken to process the file and I need to create a dashboard with chart to display the avg time. If the time taken to process the file increase it should show a spike in the chart.

I have tried
{table search} | bucket _time span=1d | stats avg(ProcessingTime) as AvgTime by _time

But it returns null.

Could you please help?

Thanks

Tags (1)
0 Karma

arjunpkishore5
Motivator

Assuming that the field ProcessingTime is present in your data, you can just do this instead of the stats

{table search} 
|timechart span=1d avg(ProcessingTime) as AvgTime

NOTE: Field names are case sensitive

0 Karma

gravi
Explorer

Thanks for the reply. But I get 'No results found.'

0 Karma

gravi
Explorer

Tried this
chart values(ProcessingTime) as AvgTime by FileName

it gives me results but the avgTime is 0 for all

0 Karma

to4kawa
Ultra Champion

HI, There may be no ProcessingTime field

0 Karma

gravi
Explorer

we are calculating the processing time as difference of two time fields and it is in the tables search with results

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...