https://community.splunk.com/t5/Splunk-Search/How-to-get-a-count-of-daily-active-users-in-the-last-3-days/m-p/217137#M63763 <P>Assuming you have the data in splunk, try this</P> <PRE><CODE>base search earliest=-3d@d | timechart span=1d dc(phoneID) as "Active Users" </CODE></PRE> Thu, 29 Sep 2016 15:32:44 GMT sundareshr 2016-09-29T15:32:44Z https://community.splunk.com/t5/Splunk-Search/How-to-get-a-count-of-daily-active-users-in-the-last-3-days/m-p/217135#M63761 <P>Hi All,</P> <P>I'm new to Splunk and new to get a count of the daily active users in the last 3 days.<BR /> Users in our system are tracked by phoneID.<BR /> How would I go about doing that?</P> Thu, 29 Sep 2016 13:11:43 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-a-count-of-daily-active-users-in-the-last-3-days/m-p/217135#M63761 rob9mcneil9 2016-09-29T13:11:43Z https://community.splunk.com/t5/Splunk-Search/How-to-get-a-count-of-daily-active-users-in-the-last-3-days/m-p/217136#M63762 <P>If you could post some sample data that would help the community help you. </P> Thu, 29 Sep 2016 14:09:54 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-a-count-of-daily-active-users-in-the-last-3-days/m-p/217136#M63762 JDukeSplunk 2016-09-29T14:09:54Z https://community.splunk.com/t5/Splunk-Search/How-to-get-a-count-of-daily-active-users-in-the-last-3-days/m-p/217137#M63763 <P>Assuming you have the data in splunk, try this</P> <PRE><CODE>base search earliest=-3d@d | timechart span=1d dc(phoneID) as "Active Users" </CODE></PRE> Thu, 29 Sep 2016 15:32:44 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-a-count-of-daily-active-users-in-the-last-3-days/m-p/217137#M63763 sundareshr 2016-09-29T15:32:44Z