I am doing a search to get the total count of different URIs and their response times. My result has multiple events of similar URLs -
Like /abc/{id1}/xyz;
/abc/{id2}/xyz
/abc/{id3}/xyz.
Only the `{id}` in the URL varies, and the rest of the URI portion is same.
How can I group these events as 1 event, and still get the total count of hits to this URI?
This is my search -
index=stuff RelativeURI="/abc/*/xyz" |stats count as total_call_count, avg(ResponseTime) as avgResponse by RelativeURI
↧