Who’s Using Splunk?

I often get asked how much a certain dashboard gets looked at, or how many times a user looks at a specific app. I wrote this quick query to answer that question.

index=_internal sourcetype="splunk_web_access" method="GET" status="200" 
| stats count as count by user, view
| appendpipe [stats sum(count) as count by user | eval view = "Total Views"]
| sort + user
Share This:


  1. Pingback: See who is using Splunk by user, app and view -

Leave A Comment?