Extract the second number from the last from a string and get top 25.


1 comment

  • Avatar
    David Wynn

    You should be able to extract the next to last value with a regular expression similar to the following:


    So, a query that looks for the top 25 GetPeopleInfo response times greater than 100ms might look like this:

    _sourceCategory=Tomcat GetPeopleInfo
    | parse regex "(?<time_taken>\d+)\s+\d+$"
    | where time_taken > 100
    | sort by time_taken desc
    | limit 25

    Comment actions Permalink

Please sign in to leave a comment.