Hello!
I am a new to developing visualizations/dashboards, can someone please guide my learning by recommending how to approach solving the following problem?
I created a search to identify the duration/time users might experience when logging into one of our applications.
The search results are placed in a table as shown below:
UserID ----- Login Session Duration (In seconds)
bob001 ---- 7s
anil002 ---- 10s
chris03 ---- 14s
Below is the search I am using:
index=ags sourcetype=agslogs | tranaction startwith=Retrieving endswith=Retrieved | stats sum(duration) by UserID | rename sum(duration) as "login Duration(seconds)" | rename userID as "AGS User Name"
My question:
With over a thousand users for this particular application, how do I take the results of the search and create email alerts for only those user login sessions that exceed the performance baseline (let's just say 10sec)? Can someone share an example search that will perform the task? Or point to an alternative approach to solving this problem?
Your assistance/guidance is highly appreciated!
... View more