Splunk Operational Intelligence Cookbook - Third Edition

How to do it...

Follow the steps in this recipe to identify the number of concurrent checkouts over a given period of time:

1. Log in to your Splunk server.
2. Select the Operational Intelligence application.
3. Ensure the time range picker is set to Last 24 Hours, and type the following search into the Splunk search bar. Then, click on the search button or hit Enter:

index=main sourcetype=access_combined | transaction  JSESSIONID startswith="GET /home" endswith="checkout"  | concurrency duration=duration | timechart max(concurrency) AS "Concurrent Checkouts"

4. Splunk will return the values associated with the maximum concurrent checkout's split in 30-minute durations.
5. Click on the Visualization tab.
6. Since there are a number of visualizations within ...