Total Hits on Most Active Day in IIS

The following Splunk query will return the total number of hits on the most active day in a given time range within an IIS environment:

sourcetype="iis" |  top limit=1 date_mday | rename count as Value| fieldformat Value=tostring(Value,"commas") | eval Metric="Number of hits on Most active date" | fields - date_mday, count, percent | fields Metric, Value
Share This:

Leave A Comment?