SPL
Total Hits on Most Active Day in IIS
Description
The following Splunk query will return the total number of hits on the most active day in a given time range within an IIS environment:
0 0
sourcetype="iis" | top limit=1 date_mday | rename count as Value| fieldformat Value=tostring(Value,"commas") | eval Metric="Number of hits on Most active date" | fields - date_mday, count, percent | fields Metric, Value
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.