Splunk Search

tell how many user visited different sites (transaction with one field same and one field _different_)

a3p
New Member

having a field user_id='1234' and page_id='yellow books' or page_id='green books', i can easily do a search

search | transition user_id

but this also returns users who only visited one of the pages multiple times.
what i need is to track users through different sites and count how many pages they have visited in average. preferable without being limited to a maximum time between events. i.e. over the entire dataset.

Tags (1)
0 Karma

kristian_kolb
Ultra Champion

It looks like this could be done with stats:

your_search | stats dc(page_id) AS distinct_pages c as visits values(page_id) as pages by user_id | where distinct_pages >1 

/K

strive
Influencer

You need total number of unique pages visited by each user OR Average number of visits per user per day.

Can you post some sample log lines.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...