Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to search the difference between two values that share the same field name from two different sourcetypes?

$
0
0
I'm trying to get the difference between two values that share the same field name from two different sourcetypes that contain a field indicating a request has been completed. A. sourcetype=one AND event="FINISH" (the field that i'm interested in here would be responseTime) B. sourcetype=two AND event="COMPLETE" (again, looking for responseTime) How do I plot the difference between responseTime A and responseTime B?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>