I want to calculate the download speed for each fetched transaction page in bytes per second. transaction pages consist of login page(that has user login details) and openloan pages consist of documents. I want to have data in bytes per second I have written the below query that gives  me response time in second and i would like to add one more field here that would give me data in bytes per second for  fetched  transaction pages. index=app_iis source=*Inetpub* (host=JTCOTWCEMPLW* OR host=JTCOTWCEMPPW* OR host=JTCEP1WPLOSW* OR host=JTCEP1WPPORW*) http_method=GET Uri="*LOSWeb*" Uri="*aspx*" Time_taken!="-" |eval APClientSource=split(Uri,"/"), APClientName=mvindex(APClientSource,1) |search APClientSource="Login.aspx" OR APClientSource="OpenLoan.aspx" |eval "Time_taken(s)"='Time_taken'/1000 |bin _time span=5m |stats avg(Time_taken(s)) as avgURT,distinct_count(C_username) as usercount by host,APClientName,cs_uri_stem,_time |eval avgURT=round(avgURT,0),StdevURT=round(StdevURT,0) ... View more

e.g QUERY 1: host=jtcstcxbsswb* source="/usr/IBM/HTTPServer/logs/access*" httpmethod="GET" statuscode="200" loaninfo="/api*" OR Requestinfo="*/" OR sitename="*/LoginAccountUserName" |eval APFields=split(loaninfo,"/") |eval APNumOfFields=mvcount(APFields) |eval AP2ndFromLast=mvindex(APFields,APNumOfFields-2) |eval APLoanNumber=mvindex(APFields,6) |eval APLast=mvindex(APFields,-1) |search APLast="loans" OR APLast="summary" OR APLast="payments" |timechart count(APLast), Avg(cookie) as URT  by APLast   Query 2 :sourcetype=apigee:digit* host=JTCLSGLAPGERT* APIProduct=*-Authenticated-Product |timechart span=5m distinct_count(LoginAccountUserName) i want something like this   host=jtcstcxbsswb* source="/usr/IBM/HTTPServer/logs/access*" httpmethod="GET" statuscode="200" loaninfo="/api*"  |eval APFields=split(loaninfo,"/") |eval APNumOfFields=mvcount(APFields) |eval AP2ndFromLast=mvindex(APFields,APNumOfFields-2) |eval APLoanNumber=mvindex(APFields,6) |eval APLast=mvindex(APFields,-1) |search APLast="loans" OR APLast="summary" OR APLast="payments" |stats count(APLast), Avg(cookie) as URT  by APLast |append [search sourcetype=apigee:digit* host=JTCLSGLAPGERT* APIProduct=*-Authenticated-Product |timechart span=5m distinct_count(LoginAccountUserName) ]  |bin _time|stats count(APLast), Avg(cookie) as URT ,distinct_count(LoginAccountUserName) by APLast I am able to get the data  as  Time  | count(APLAST) | URT | LoginAccountUserName (I see only zero values in LoginAccountUserName) how to fetch the LoginAccountUserName data from 2nd query and list it here. ... View more