Splunk Search

tell how many user visited different sites (transaction with one field same and one field _different_)

a3p
New Member

having a field user_id='1234' and page_id='yellow books' or page_id='green books', i can easily do a search

search | transition user_id

but this also returns users who only visited one of the pages multiple times.
what i need is to track users through different sites and count how many pages they have visited in average. preferable without being limited to a maximum time between events. i.e. over the entire dataset.

Tags (1)
0 Karma

kristian_kolb
Ultra Champion

It looks like this could be done with stats:

your_search | stats dc(page_id) AS distinct_pages c as visits values(page_id) as pages by user_id | where distinct_pages >1 

/K

strive
Influencer

You need total number of unique pages visited by each user OR Average number of visits per user per day.

Can you post some sample log lines.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...