IIS Response Time

host="*"  sourcetype=iis (insertIISurl) | eval time_taken = time_taken/1000  | stats  max(time_taken) AS "Highest Response Time"

host="*"  sourcetype=iis (insertIISurl) | eval time_taken = time_taken/1000  | stats  avg(time_taken) AS "Average Response Time"

host="*"  sourcetype=iis (insertIISurl) | eval time_taken = time_taken/1000  | stats  fastest(time_taken) AS "Fastest Response Time"

    Above is 3 panels , Fastest, Average, and Longest response time.   Insert your URL and remove () and put "" around your URL . Or remove (insertIISurl) and get the response of all of your websites on a host or all host.

host="*"  sourcetype=iis "google.com" | eval time_taken = time_taken/1000  | stats  max(time_taken) AS "Highest Response Time"