How to use pct function for number of requests?

Follow

Ashok kumar

• September 04, 2019 10:07

We have all the application logs in the sumologic. And by using parse "url=*" as url | timeslice 1s | count by url, gives the url counts in a timeseries way.

Now how to calculate 95th percentile of this number of requests?

 

Thanks

0

• 

  Kevin Sumo

  • September 04, 2019 16:49

  Assuming you want the 95th percentile of the count per url the following should get that result. 

  | parse "url=*" as url 
  | timeslice by 1m
  | count by _timeslice, url
  | pct(_count, 95) by url

  0

  Comment actions Permalink

Please sign in to leave a comment.