Table of the slowest transactions

Comments

2 comments

  • Avatar
    Latimer Luis

    I think there are different ways to approach this. 

    The simplest method is to sort and limit your data without performing any aggregation. However, it's important to note that depending on the verbosity of your logging, it could take some time to complete since Sumo will have to evaluate raw events: 

    <your search scope>
    | sort by responseTime
    | limit 10
    | fields transactionName, customerName, responseTime

    Another way to get you similar results, which will perform better, is to find the max value of each transaction and customer combination, but no combination will appear more than once in the top 10. I would include a count of events to provide some context, however:

    <your search scope>
    | max(responseTime) as maxResponseTime, count as num_events by transactionName, customerName
    | top 10 transactionName, customerName, num_events by maxResponseTime

    0
    Comment actions Permalink
  • Avatar
    Chris Winkler

    Thanks! This did it:

     

    | sort by responseTime
    | limit 10
    | fields transactionName, customerName, responseTime

     

     

    0
    Comment actions Permalink

Please sign in to leave a comment.