Dashboards & Visualizations

numbering rows by field name?

Yarsa
Path Finder

How do I set a new column which specifies the occurence order of events, grouped by another field.

For example - users Y,X and Z had 5 sessions each.
How can I number their sessions from 1 to 5, so I can choose to analyze only data from their second session.

Thanks:)

Tags (1)
0 Karma
1 Solution

Ayn
Legend

If you have one event per session, you can use streamstats to create a count per user:

... | streamstats count AS session_number by user

View solution in original post

0 Karma

Ayn
Legend

If you have one event per session, you can use streamstats to create a count per user:

... | streamstats count AS session_number by user
0 Karma
Get Updates on the Splunk Community!

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

[Puzzles] Solve, Learn, Repeat: Nested loops in Event Conversion

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...