Splunk Search

How can I create a report giving a number of counts per categories per week ?

stenou
New Member

I am struggling to create a report that would give number of counts per categories per week. Something that could be presented like:
alt text

Any idea ? Thank you !

0 Karma
1 Solution

marina_rovira
Contributor

Hi there!

I maybe need a little more of information, but I will try it anyway.

I've, recently, create somethign like this. I had two categories A and B, but try this for the categories:

| timechart span=7d count by categories

For getting the view that you want you have to go to "visualization" and choose the option "column".

If I missunderstand something or you need something else write it! 🙂

View solution in original post

0 Karma

marina_rovira
Contributor

Hi there!

I maybe need a little more of information, but I will try it anyway.

I've, recently, create somethign like this. I had two categories A and B, but try this for the categories:

| timechart span=7d count by categories

For getting the view that you want you have to go to "visualization" and choose the option "column".

If I missunderstand something or you need something else write it! 🙂

0 Karma

stenou
New Member

Thank you !

0 Karma

somesoni2
Revered Legend

I would suggest to use span=1w to ensure capturing full week.

Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...