How to report on open requests over time

Follow

Nate Dudenhoeffer

• August 10, 2018 21:09

I have a series of logs which contain a request start time and a request end time. I would like to build a timeslice query which is the total number of requests open during the slice. These are websocket requests which may remain open for long periods of time.

0

• Official comment

  

  Eric Lorson

  • August 24, 2018 18:53

  Nate,

  timeslice queries only run against the _messagetime field, so what you are suggesting will not work.  But you can convert the timestamps to epoch and then do a straight math comparison to define each slice.  It will take a little more query work, but it is possible.

  Eric

   

  Permalink

Please sign in to leave a comment.