Getting Data In

IIS Logs Count

tundeawe
New Member

From an IIS logs, if a user goes to the webpage once but 50 different thing are loaded on the webpage(example images) and Splunk counts each individual thing loaded on the page as a count. How can I find out how many times an IP got to a particular destination IP?

0 Karma

FrankVl
Ultra Champion

Try something along the lines of this, to do a distinct count on source IPs by destination IPs (field names might need adjustment):

...<your base search>...
| stats dc(src_ip) by dest_ip
0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...