Splunk Operational Intelligence Cookbook - Third Edition

How to do it...

Follow these steps to create a timechart of method requests, views, and response times:

1. Log in to your Splunk server.
2. Select the default Search & Reporting application.
3. Ensure that the time range picker is set to Last 7 days, and type the following search into the Splunk search bar. Then, click on Search or hit Enter:

index=main sourcetype=access_combined | eval  GET_response=if(method=="GET",response,0) | eval  POST_response=if(method=="POST",response,0) | timechart  span=5m avg(GET_response) AS Avg_GET_Response,  avg(POST_response) AS Avg_POST_Response,  count(eval(method=="GET")) AS GET_Total,  count(eval(method=="POST")) AS POST_Total, count AS  Total_Visits

4. Splunk will return a time series chart of values for the average ...