<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Specific Page Views by Day in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Specific-Page-Views-by-Day/m-p/20467#M3192</link>
    <description>&lt;P&gt;&lt;CODE&gt;bucket&lt;/CODE&gt; is exactly what I was looking for. This worked for me: &lt;CODE&gt;index="myIndex" host=myHost cs_uri_stem=myPageUri | bucket _time span=1d | timechart count&lt;/CODE&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 01 Nov 2012 17:02:48 GMT</pubDate>
    <dc:creator>slierninja</dc:creator>
    <dc:date>2012-11-01T17:02:48Z</dc:date>
    <item>
      <title>Specific Page Views by Day</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Specific-Page-Views-by-Day/m-p/20465#M3190</link>
      <description>&lt;P&gt;How can I see a specific page's view count by day? For any given day, it will show the count of the number of views.&lt;/P&gt;

&lt;P&gt;I've tried this: &lt;CODE&gt;index="myIndex" host=myHost cs_uri_stem=myPageUri | timechart per_day(count)&lt;/CODE&gt;&lt;/P&gt;

&lt;P&gt;How do I see the &lt;STRONG&gt;number of page views for a given page day-by-day&lt;/STRONG&gt;?&lt;/P&gt;

&lt;P&gt;This will give me the count for each time logged, not by day.&lt;BR /&gt;
&lt;CODE&gt;index="myIndex" host=myHost cs_uri_stem=myPageUri | stats count by _time&lt;/CODE&gt;&lt;/P&gt;

&lt;H3&gt;Expected Output&lt;/H3&gt;

&lt;PRE&gt;
+-----------+------------+
|   Day     | Page Views | 
+-----------+------------+
| 10/28/12  |      0     |
| 10/29/12  |     10     |
| 10/30/12  |     30     |
| 10/31/12  |     40     |
+-----------+------------+
&lt;/PRE&gt;</description>
      <pubDate>Thu, 01 Nov 2012 16:12:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Specific-Page-Views-by-Day/m-p/20465#M3190</guid>
      <dc:creator>slierninja</dc:creator>
      <dc:date>2012-11-01T16:12:34Z</dc:date>
    </item>
    <item>
      <title>Re: Specific Page Views by Day</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Specific-Page-Views-by-Day/m-p/20466#M3191</link>
      <description>&lt;P&gt;You could use a default date field and change it to 'stats count by date_mday'. (or date_wday which is week days versus month).&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/5.0/Knowledge/Usedefaultfields" target="_blank"&gt;http://docs.splunk.com/Documentation/Splunk/5.0/Knowledge/Usedefaultfields&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;The bucket command also gives you flexibility to manipulate blocks of data based on time. &lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/bucket" target="_blank"&gt;http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/bucket&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 12:43:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Specific-Page-Views-by-Day/m-p/20466#M3191</guid>
      <dc:creator>sdaniels</dc:creator>
      <dc:date>2020-09-28T12:43:23Z</dc:date>
    </item>
    <item>
      <title>Re: Specific Page Views by Day</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Specific-Page-Views-by-Day/m-p/20467#M3192</link>
      <description>&lt;P&gt;&lt;CODE&gt;bucket&lt;/CODE&gt; is exactly what I was looking for. This worked for me: &lt;CODE&gt;index="myIndex" host=myHost cs_uri_stem=myPageUri | bucket _time span=1d | timechart count&lt;/CODE&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 01 Nov 2012 17:02:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Specific-Page-Views-by-Day/m-p/20467#M3192</guid>
      <dc:creator>slierninja</dc:creator>
      <dc:date>2012-11-01T17:02:48Z</dc:date>
    </item>
  </channel>
</rss>

