I've created a search to chart average response times of each application over the past 3 months. How would I get the aggregate total of each month per application?
my search COMPANY="FOO" PORT="*"
| eval AVG_RESP_TIME = AVG_RESP_TIME/1000
| bin span=1mon _time
| chart avg(AVG_RESP_TIME) as average over PORT by date_month
| rename PORT as Application
Output would like similar to:
Application June July August
PDTeller 0.93 ms 0.99 ms 0.90 ms
WebAdmin 1.81 ms 2.51 ms 2.36 ms
WebCSR 1.36 ms 1.57 ms 1.42 ms
WebClient 3.99 ms 2.89 ms 2.53 ms
Xpress 6.74 ms 6.98 ms 6.67 ms
**Aggregate Total 2.97 ms 2.99 ms 2.78 ms**
↧