I want to plot the 90 percentile response time in Splunk. Is the below correct?
| timechart p90(ResponseTime)
or is the below correct
eventstats avg(ResponseTime) as ttavg | eventstats p90(ttavg) as p90avg | timechart max(p90avg)
↧