Elasticsearch - ELK Stack Integration
Which Elasticsearch query syntax correctly calculates the average response time from APM data?
Which Elasticsearch query syntax correctly calculates the average response time from APM data?
easy📝 Syntax Q12 of Q15
Step-by-Step Solution
Solution:
Step 1: Identify aggregation for average
The query uses "avg" aggregation on the field "transaction.duration.us" which stores response times in microseconds.Step 2: Confirm query structure
Size is 0 to avoid returning documents, focusing only on aggregation results, which is correct for average calculation.Final Answer:
GET /apm-*/_search {"size":0, "aggs": {"avg_response_time": {"avg": {"field": "transaction.duration.us"}}}} -> Option CQuick Check:
Average aggregation query = GET /apm-*/_search {"size":0, "aggs": {"avg_response_time": {"avg": {"field": "transaction.duration.us"}}}} [OK]
Quick Trick: Average uses "avg" aggregation with size 0 [OK]
Common Mistakes:
MISTAKES- Using match_all without aggregation
- Using update_by_query instead of search
- Using max aggregation instead of avg
Master "ELK Stack Integration" in Elasticsearch
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Elasticsearch Quizzes