host="*" sourcetype=iis (insertIISurl) | eval time_taken = time_taken/1000 | stats max(time_taken) AS "Highest Response Time"
host="*" sourcetype=iis (insertIISurl) | eval time_taken = time_taken/1000 | stats avg(time_taken) AS "Average Response Time"
host="*" sourcetype=iis (insertIISurl) | eval time_taken = time_taken/1000 | stats fastest(time_taken) AS "Fastest Response Time"
Above is 3 panels , Fastest, Average, and Longest response time.
Insert your URL and remove () and put “” around your URL . Or remove (insertIISurl) and get the response of all of your websites on a host or all host.
host="*" sourcetype=iis "google.com" | eval time_taken = time_taken/1000 | stats max(time_taken) AS "Highest Response Time"