Logscape Support

Members Login
Username 
 
Password 
    Remember Me  
Logscape Support -> logscape -> Search: count number of events per minute
Post Info TOPIC: Search: count number of events per minute
Denno


Newbie

Status: Offline
Posts: 2
Date:
Search: count number of events per minute
Permalink  
 

Hi, 

I'm trying to count the number of events in a limited time period. Eventually I want to get the max, min and average "hits" per minute. 

Logscape is not really doing what I want, so let's assume I do something wrong smile

I have this search: 

IN-REQ | _date+_hour+_minute.count(,)  chart(table) buckets(1) 

This gives a nice table, but way too much results. So I label the count as "hits" and want to get the top 10:

IN-REQ | _date+_hour+_minute.count(,hits)  chart(table) buckets(1) top(10,hits)

Sort of according to whats described on this page. However, I get the very same extensive list. It doesn't accept my label it seems. 

Going further (what I eventually want) this line graph doesn't give anything:

IN-REQ | _date+_hour+_minute.count(,hits) hits.max(,MaxHits) hits.min(,MinHits) hits.avg(,avgHits) chart(line)

What am I doing wrong?

Thanks! 

 



__________________
ZG


Veteran Member

Status: Offline
Posts: 60
Date:
Permalink  
 

 

Hi Denno, 


The post aggregate filters work only with the include and exclude functions. Numerical functions can not be applied to these. There might be another way of doing what you want.

Could you post some sample data?

Regards, 

ZG



__________________
ZG


Veteran Member

Status: Offline
Posts: 60
Date:
Permalink  
 

Hi Denno,

You can get the volume of events per minute using the sum function. Your search would look something like this:

| _minute.count() _type.equals(my-data-type)

It doesn't quite get you as far as you would like. We're currently investigating a set of new analytic functions that will give you min/max/avg for your use case. Could you update the poll with any analytics/functions that you would like included in a future point release here: logscape.activeboard.com/t59107359/poll-for-new-analytic-functions/


Regards,

ZG





__________________
Page 1 of 1  sorted by
Quick Reply

Please log in to post quick replies.
Logscape Support -> logscape -> Search: count number of events per minute


Create your own FREE Forum
Report Abuse 		Powered by ActiveBoard