https://community.splunk.com/t5/Getting-Data-In/IIS-Logs-and-URI/m-p/27984#M4750 <P>you could probably do something like depending on the contents of your iis logs</P> <P><CODE>sourcetype=iis* | stats count(cs_uri_stem) AS timesaccessed dc(cs_username) AS uniqueusercount avg(time_taken) AS AVGduration by cs_uri_stem</CODE></P> Wed, 18 Apr 2012 20:59:41 GMT cramasta 2012-04-18T20:59:41Z https://community.splunk.com/t5/Getting-Data-In/IIS-Logs-and-URI/m-p/27983#M4749 <P>I want to create a dashboard showing all the stats of a web site by URI.<BR /> eg. if the main site is <A href="http://www.mysite.com">www.mysite.com</A><BR /> I want it to show all the uri's under that site (without me having to type in each uri in the search string)</P> Tue, 17 Apr 2012 01:32:43 GMT https://community.splunk.com/t5/Getting-Data-In/IIS-Logs-and-URI/m-p/27983#M4749 adrianallan 2012-04-17T01:32:43Z https://community.splunk.com/t5/Getting-Data-In/IIS-Logs-and-URI/m-p/27984#M4750 <P>you could probably do something like depending on the contents of your iis logs</P> <P><CODE>sourcetype=iis* | stats count(cs_uri_stem) AS timesaccessed dc(cs_username) AS uniqueusercount avg(time_taken) AS AVGduration by cs_uri_stem</CODE></P> Wed, 18 Apr 2012 20:59:41 GMT https://community.splunk.com/t5/Getting-Data-In/IIS-Logs-and-URI/m-p/27984#M4750 cramasta 2012-04-18T20:59:41Z