Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Histogram and bucket size

$
0
0
Hi I have some proprietary log data that gives 3 different response times for each event. These are extracted into Timer1,Timer2,Timer3 What I want to achieve is to count the number of timer events that fall into a bucket where i can control the bucket size. That means that just countingh the number of 0,3 second response time events is not enough, but I also want to control so that it is counted in bucket that holds 0-1 second response times. As a twist to it, I don't know how many buckets I need, or rather I don't know how long the longest response time is, but I would like to truncated/gather up the values over a certain value.. Then I want to plot the count on the Y axis, and the buckets on the X axis. I get somewhere by using: |bin span=1 timer1 as Rtime | chart count as "Count" by Rtime But then I'm stuck.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>