SPL
Visits by Days of the Week in IIS
Description
The following Splunk query will show the number of web visits for each weekday:
1 0
sourcetype="iis" | eval uppercase=upper(substr(date_wday,1,1)).substr(date_wday,2)|dedup JSESSIONID| top limit=7 uppercase | eval sort_field=case(uppercase=="Sunday",1, uppercase=="Monday",2, uppercase=="Tuesday",3, uppercase=="Wednesday",4, uppercase=="Thursday",5, uppercase=="Friday",6, uppercase=="Saturday",7) | sort + sort_field | fields - sort_field |rename count as Visits | rename uppercase as "Day of the Week"
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.