How to do it...

Follow these steps to search and calculate web page response time statistics over the past week:

1. Log in to your Splunk server.
2. Select the Search & Reporting application.
3. Ensure that the time range picker is set to Last 7 Days and type the following search into the Splunk search bar. Then, click on Search or hit Enter:

sourcetype=access_combined | timechart span=6h avg(response) AS avg_response | eval avg_response=round(avg_response/1000,2)

1. Splunk will return a tabulated list, detailing the average response times for every six-hour period going back a week, as shown in the following screenshot:
   
2. This is great, but is hard to visualize in tabular form. Click on the Visualization tab, and you will see this data represented as a chart.

1. Click on the chart type link in the upper-left of the chart (next to the Format link) and select Line if not already selected. Splunk now presents this data in a nice line chart as shown in the following screenshot, and we can now see the average response times at different times of the day much more clearly:
   
2. Save this search by clicking on Save As and then on Report. Give the report a name of cp02_webpage_response_times and click on Save. On the next screen, click on Continue Editing to return to the search.