Hey Croyal, I am familiar with the Splunk MINT app dashboard and searching it. However I was unable to design a query that could provide me a count of unique session IDs. The data is there I just don't know the proper formatting for the query and arithmetic!
... View more
This is what my session info looks like:
apiKey: a4a35eca
appEnvironment: Release
appVersionCode:
appVersionName:
batteryLevel: 50
carrier: AT&T
connection: UMTS
currentView: NA
device:
extraData: {
}
fsEncrypted: false
locale: US
msFromStart: 3100
osVersion: 4.1.1
packageName:
platform: Android
remoteIP:
rooted: true
screenOrientation: LandscapeRight
sdkVersion: 5.0.0
session_id: afaced27-f7db-4e8d-8b3d-a3dc6193e172
state: CONNECTED
transactions: [
]
userIdentifier: NA
uuid: dc0d9664313e1aa34266
I am trying to count the amount of unique sessions and then portion it out by OS, device, etc
Thanks!
... View more
Thanks for the response, I ended up with a table correctly displaying total_sessions, total_crashes, and Average_crashes. Is it possible to dive deeper into this average_crashes number and divide this number up based on device? I tried the chart command but I wasn't sure how to pull in the 'Average' that I calculated.
... View more
My query looks like this with your advice:
platform =Android sourcetype = "mint:Ping" giving field total_sessions | appendcols [search platform=Android sourcetype="mint:error" giving field total_crashes] | eval Average=Total_sessions/Total_crashes
However it is telling me that "you can only use appendcols after a reporting command such as stats, chart, or timechart"
Thanks somesoni2!
... View more
I have two searches that return respectively the number total sessions and the number of device crashes. How can I divide sessions by device crashes to get an average?
... View more