Splunk Search

Line graph of URL hits based on http code over time

nirmalya2006
Path Finder

Hi All

I have 2 fields extracted -
URL as page and HTTP Response code as ResponseCode
I want to created a chart having multiple lines, each line showing the count of each different URLs having response code 200 over a period of time, maybe hourly or daily.
How can I create the query for that.

I did the below query

| chart count over ResponseCode by page usenull=f useother=f | where ResponseCode = 200

But I am unable to fit in the _time in the query to chart it in the x-axis.
Can someone help me to get _time in x-axis and show the count of 200 ResponseCodes based on the multiple pages

Thanks

Tags (2)
0 Karma
1 Solution

sundareshr
Legend

Try this.

... | where ResponseCode = 200 | timechart span=1h count by page limit=0 

View solution in original post

sundareshr
Legend

Try this.

... | where ResponseCode = 200 | timechart span=1h count by page limit=0 

nirmalya2006
Path Finder

This helped not only the one in the question, but another of my query also.
Thank you very much..

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...