Below is my query which gets the slowest 5 pages
| parse regex ...
| parse regex ….
| num(response_time)/1000 as response_time
| timeslice 1h
| avg(response_time) as Avg_Resp_Time, pct(response_time,95) as pct_95, count by URL,_timeslice
|fields URL,Avg_Resp_Time, pct_95
|sort by pct_95
| limit 5
I usually run it for the Last 24 hrs. I want to compare the slowest 5 pages in last 24 hours with slowest 5 pages in the previous day. If I add "compare with timeshift 1d" to the end of the above query, will it give me the results I am looking for?
I did run it as mentioned. However, the results are a bit confusing and not what I expected. It is showing only the Avg response time in the chart. Also, the results in the table are not sorted by pct_95. Can someone help me on this?
Please sign in to leave a comment.