Hi
I have done a fare amount of looking around and I have given up and decided to ask for help. I have extracted a field and i can easily use the search over my field for example
source="src" get_request=*foo.php*
Now I would like to know how often in the logs the get_request field contains the following:
foo.php
bar.php
fuzz.php
However i am total uninterested in every other possible value in that field.
I could do the search three different times, but i would like to half it all graphed so i can compare which of the three is say most accessed.
I have tried things like using count however it seems to be only able to do literals that match the entire field.
Any help would be appreciated.
... View more