Splunk Search

How to get transaction count between 5-10 10-15?

karthi2809
Builder

How to get transaction count between 5-10sec 10-15sec as table ?

Expected :

Total   Success Failure 0-5 Secs    5-10 Secs   10-15 Secs  >15 Secs
 50             40  10             25             15                            5                5
 60             40  20             45               5                           5                5

my query:

index = "test"       | eval TransactionTime=TransactionSentEndtime - TransactionReceivedStartTime | eval TransactionTime=round((TransactionTime/1000),3)  |eventstats count(eval(Proxy)) as "totcnt" count(eval(Status="500" OR Status="502" OR Status="503" OR Status="504" OR Status="4*")) as "failurecnt" count(eval(Status=200)) as "success" by Sender|stats values(totcnt) as TotalCount values(failurecnt) as FailureCount values(success) as SuccessCount    by  Sender
0 Karma
1 Solution

woodcock
Esteemed Legend

You should be able to add this to the bottom:

| eval diff = $5-10 Secs$ - $10-15 Secs$

View solution in original post

woodcock
Esteemed Legend

You should be able to add this to the bottom:

| eval diff = $5-10 Secs$ - $10-15 Secs$
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...