I often get asked how much a certain dashboard gets looked at, or how many times a user looks at a specific app. I wrote this quick query to answer that question.
index=_internal sourcetype="splunk_web_access" method="GET" status="200" | stats count as count by user, view | appendpipe [stats sum(count) as count by user | eval view = "Total Views"] | sort + user
Pingback: See who is using Splunk by user, app and view -