I am trying to do something very simple but cannot figure it out. I am new to splunk and using the web intelligence app.
I am trying to look at the average # of pageviews for each hour of the day over a wide time period to find out the least busiest time of day so I can schedule maintenance.
Can anyone help me?
sourcetype="that has data for pageviews" |chart avg(pageviews) over date_hour
Hope I helped:)
If you ever want to see breakdown by day run:
sourcetype="that has data for pageviews" | convert timeformat="%m/%d/%y" ctime(time) as "daytime" | chart avg(pageviews) over datehour by daytime
That worked great for the total pageviews! Thanks! Here is the search:
host=* [ stats count | addinfo | eval range=infomaxtime - infomintime | eval search=if(range<=(86400+3600),"index=wisummaryhourly","index=wisummarydaily") ] source="User session visitor source*" | chart eval(sum(myeventcount)) AS pageviews over date_hour
However, I was looking for the average and when I replace sum(myeventcount) with avg(myeventcount), it doesn't give a correct average. Any thoughts?