Hi Team, I want to create a splunk dashboard with the avearge response time taken by the all the API's wich follow this condition. Example: I have below API's /api/cvraman/book /api/apj/book /api/nehru/book /api/cvraman/collections /api/apj/collections /api/indira/collections /api/rahul/notes /api/rajiv/notes /api/modi/notes Now i will check for the average of the API /api/*/book,/api/*/collections,/api/*/notes. Dashboard should have only these response times in the chart /api/*/book,/api/*/collections,/api/*/notes. i tried the below query but the dashboard shows the combined average on all the three can someone please help on this index=your_index (URI = /api/*/book OR URI = /api/*/collections OR /api/*/notes. ) |stats avg(duration) as avg_time   ... View more

Hi Team, I want to have a query which displays me all types of exceptions occured in the last 30 days in a table way or else in a graphical way. We just wanted to see the count of the exceptions every 30 days. I have been using this query but it didnt work. Iam new to splunk so please help me to find out index=dev | rex field=_raw "\b(?(java|javax).[\w.]+Exception)" | chart count by exception_type ... View more