Is it possible to program some special consolidation inside Splunk?
For example: I want to run trough all log lines, ordered by id_user and date. For each 30 minutes a user navigate on my site, I count one visitor session, except for IPs inside a black list.
Is Splunk made for it?
... View more