Visits by Days of the Week in IIS

The following Splunk query will show the number of web visits for each weekday:

sourcetype="iis" | eval uppercase=upper(substr(date_wday,1,1)).substr(date_wday,2)|dedup JSESSIONID| top limit=7 uppercase | eval sort_field=case(uppercase=="Sunday",1, uppercase=="Monday",2, uppercase=="Tuesday",3, uppercase=="Wednesday",4, uppercase=="Thursday",5, uppercase=="Friday",6, uppercase=="Saturday",7) | sort + sort_field | fields - sort_field |rename count as Visits | rename uppercase as "Day of the Week"
Share This:

Leave A Comment?