Response time from Apache log

My log format is below: 10.10.143.18 - "-" [21/Feb/2012:00:05:39 +0900] "POST /default/2881.ajax HTTP/1.1" 200 115538 "http://www.mycompany.com/index.jsp" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; InfoPath.1)"

I can see the clientip, refer fields but not response time after indexing. How can I get it and sort it on demand?

asked 22 Feb, 19:44

napo
21
accept rate: 0%

What is the sourcetype of the input?

(22 Feb, 22:55) lguinn ♦

Yes,there is no response time field. It should be logged on web application server. Thanks

(24 Feb, 01:06) napo

2 Answers:

oldest newest most voted

1	in your apache data sample i do not see any response time field value? link answered 23 Feb, 05:35 MarioM 1.4k●2●7 accept rate: 18%

0	With Apache 2.4 the logging modul allows to activate New fields. One Field ist the prcocessing time. But the best is the New transaction id. link answered 24 Feb, 12:36 jensihnow 31●4 accept rate: 0%

Post your answer

toggle preview

Follow this question

Email:

RSS:

Answers

Answers + Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

apache ×37
apache_log ×5

Asked: 22 Feb, 19:44

Seen: 308 times

Last updated: 24 Feb, 12:36

Response time from Apache log

Follow this question

Splunk Resources

Related questions