Nr. of unique visitors per hour timechart

host=insertHostnameHere sourcetype=access_combined | timechart span=1h dc(sourceIP)
If you have Fieldextraction for the visitor IP’s, in this example named ‘sourceIP’, this simple query will list the number of unique visitors per hour

Share This:

Leave A Comment?