topic Re: App Sessions Started 24 hour average (All Time) - How to? in Security

App Sessions Started 24 hour average (All Time) - How to?

Rapidz — Tue, 01 Mar 2022 22:36:27 GMT

Hey everyone,

I am trying to gauge at what time users are active on our app. I want to use data from (All time) to gather the average on a 24 hour scale. Is there a way for I can see the average time by hour. Right now this just shows the times when users login. It would be super useful for I can know how many users on average use the app by X AM/PM.

My current query is:

index=app1 AND service=app AND logLevel=INFO AND environment=prod "message.eventAction"=START_SESSION |timechart span=1h count

This query can gather the users by hour on a 24 hour scale, but not the average from (All time).

If anyone could help, it would be greatly appreciated!

Re: App Sessions Started 24 hour average (All Time) - How to?

ITWhisperer — Wed, 02 Mar 2022 10:11:54 GMT

index=app1 AND service=app AND logLevel=INFO AND environment=prod "message.eventAction"=START_SESSION | chart count by date_hour

Re: App Sessions Started 24 hour average (All Time) - How to?

Rapidz — Wed, 02 Mar 2022 17:04:07 GMT

That search does not seem to work. The query I have can work for the last 24 hours. It would be great, if it could work for taking the average of all SESSIONS_STARTED across 24 hours to get a picture of when users start the app.

Re: App Sessions Started 24 hour average (All Time) - How to?

ITWhisperer — Wed, 02 Mar 2022 17:09:45 GMT

index=app1 AND service=app AND logLevel=INFO AND environment=prod "message.eventAction"=START_SESSION | bin _time span=1h | stats count values(date_hour) as date_hour by _time | chart avg(count) as average_per_hour by date_hour