{"id":6386,"date":"2017-07-03T06:48:23","date_gmt":"2017-07-03T11:48:23","guid":{"rendered":"http:\/\/appcrawler.com\/wordpress\/?p=6386"},"modified":"2017-07-03T06:50:08","modified_gmt":"2017-07-03T11:50:08","slug":"splunk-histogramdistribution-of-jboss-session-length","status":"publish","type":"post","link":"http:\/\/appcrawler.com\/wordpress\/2017\/07\/03\/splunk-histogramdistribution-of-jboss-session-length\/","title":{"rendered":"Splunk &#8211; Histogram\/distribution of JBOSS session length"},"content":{"rendered":"<p>As you can see below, 95% of our sessions are less than five minutes in length.  This is very useful in sizing the session timeout variable in your context.xml file.<\/p>\n<pre>\r\nhost=cmhlpecomweb* sourcetype=access*\r\n  | rex mode=sed field=_raw \"s\/\\t\/~\/g\"\r\n  | eval tmp=split(_raw,\"~\")\r\n  | eval jsessionid = mvindex(tmp,14)\r\n  | transaction jsessionid\r\n  | stats sum(duration) AS session_time by jsessionid\r\n  | where session_time > 10\r\n  | bucket session_time span=300 \r\n  | stats count by session_time \r\n  | sort by session_time\r\n<\/pre>\n<p><img alt='' class='alignnone size-full wp-image-6391 ' src='http:\/\/appcrawler.com\/wordpress\/wp-content\/uploads\/2017\/06\/img_595686b13c88e.png' \/><\/p>\n<p>Keep in mind the larger the time window under scrutiny, the more likely you are to eliminate statistical outliers.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As you can see below, 95% of our sessions are less than five minutes in length. This is very useful in sizing the session timeout variable in your context.xml file. host=cmhlpecomweb* sourcetype=access* | rex mode=sed field=_raw &#8220;s\/\\t\/~\/g&#8221; | eval tmp=split(_raw,&#8221;~&#8221;)&hellip;<\/p>\n<p class=\"more-link-p\"><a class=\"more-link\" href=\"http:\/\/appcrawler.com\/wordpress\/2017\/07\/03\/splunk-histogramdistribution-of-jboss-session-length\/\">Read more &rarr;<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"footnotes":""},"categories":[49,81],"tags":[],"_links":{"self":[{"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/posts\/6386"}],"collection":[{"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/comments?post=6386"}],"version-history":[{"count":7,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/posts\/6386\/revisions"}],"predecessor-version":[{"id":6396,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/posts\/6386\/revisions\/6396"}],"wp:attachment":[{"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/media?parent=6386"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/categories?post=6386"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/appcrawler.com\/wordpress\/wp-json\/wp\/v2\/tags?post=6386"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}