All Apps and Add-ons

How to find the average number of events per day using Splunk on Splunk app metrics in Splunk?

shellnight
Explorer

how i can find the average number of events per day using SOS app metrics in splunk ?

the search index=* | timechart span=1d count as dailycount takes hours and hangs

0 Karma

somesoni2
Revered Legend

Try this

index=_internal sourcetype=splunkd group=per_index_thruput |timechart span=1d sum(ev) as dailycount
0 Karma

shellnight
Explorer

Update please

0 Karma

shellnight
Explorer

Get the below error
Error in 'timechart' command: The specifier 'sum' is invalid. It must be in form (). For example: max(size).

0 Karma
Get Updates on the Splunk Community!

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...