topic Re: Frequency of events - how often an event was logged in Splunk Search https://community.splunk.com/t5/Splunk-Search/Frequency-of-events-how-often-an-event-was-logged/m-p/16862#M2271 <P>I would use eval in combination with stats. For example:</P> <PRE><CODE>sourcetype=apache_error earliest=-60m | stats count as total | eval errors_per_min=(total/60) | fields error_per_min </CODE></PRE> <P>This would take the total # of events over the past 60 minutes, then divide by 60 to get you a count per minute. Or from the advanced charting view:</P> <PRE><CODE>sourcetype=apache_error earliest=-60m | timechart span=1m count as error_per_min </CODE></PRE> Tue, 06 Jul 2010 00:28:28 GMT Simeon 2010-07-06T00:28:28Z Frequency of events - how often an event was logged https://community.splunk.com/t5/Splunk-Search/Frequency-of-events-how-often-an-event-was-logged/m-p/16861#M2270 <P>Does anyone have a good way (or am I missing the something obvious?) of calculating for a defined time range the average frequency of the events logged?</P> <P>Such as eventtype A appeared every X minutes.</P> <P>Thanks!</P> Mon, 05 Jul 2010 18:45:47 GMT https://community.splunk.com/t5/Splunk-Search/Frequency-of-events-how-often-an-event-was-logged/m-p/16861#M2270 Derek 2010-07-05T18:45:47Z Re: Frequency of events - how often an event was logged https://community.splunk.com/t5/Splunk-Search/Frequency-of-events-how-often-an-event-was-logged/m-p/16862#M2271 <P>I would use eval in combination with stats. For example:</P> <PRE><CODE>sourcetype=apache_error earliest=-60m | stats count as total | eval errors_per_min=(total/60) | fields error_per_min </CODE></PRE> <P>This would take the total # of events over the past 60 minutes, then divide by 60 to get you a count per minute. Or from the advanced charting view:</P> <PRE><CODE>sourcetype=apache_error earliest=-60m | timechart span=1m count as error_per_min </CODE></PRE> Tue, 06 Jul 2010 00:28:28 GMT https://community.splunk.com/t5/Splunk-Search/Frequency-of-events-how-often-an-event-was-logged/m-p/16862#M2271 Simeon 2010-07-06T00:28:28Z Re: Frequency of events - how often an event was logged https://community.splunk.com/t5/Splunk-Search/Frequency-of-events-how-often-an-event-was-logged/m-p/16863#M2272 <P>I knew I missing something obvious <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Tue, 06 Jul 2010 19:36:47 GMT https://community.splunk.com/t5/Splunk-Search/Frequency-of-events-how-often-an-event-was-logged/m-p/16863#M2272 Derek 2010-07-06T19:36:47Z