How to create a dashboard in Splunk similar to an AWStats report?

[anasar]

Hi,

We've indexed all jboss access.log files. We're using AWStats before. Just to make a smooth transition, we need to provide AWStats kind of report first. Can you suggest how to get the exact searches to get unique_visitors, visits, pages, hits and bandwidth, session duration, etc. using Splunk? For unique_visitiors I've used the search below:

index=jboss-access method=POST | stats distinct_count(clientip) as Uniquevisitors

[martin_mueller]

How to get the exact searches in Splunk depends on how the exact searches in AWStats are built.

For example, you've used dc(clientip) for unique visitors - is that how AWStats computes unique visitors? I'm asking because determining correctly which hit on a page belongs to what person is extremely hard. There are many ways to approximate this, your example is only one of them.

If you need specific help with a certain search you can get help here, just make sure to spell out your requirements for the search instead of posting a screenshot - any algorithm could be behind that, so trying to recreate it like that is futile.
If you need someone to rebuild that entire page for you I'd recommend getting Splunk Professional Services or a local Splunk Partner for a few days on site.

[ppablo]

Hi @anasar

It would be helpful if you could include a link to an image showing what an AWStats report looks like for people who are not familiar with it.

[anasar]

A sample screeshot is given @ http://www.nltechno.com/awstats/awstats.pl?config=destailleur.fr