Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Re: Analyse Apache Other Vhosts Access Log
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello, I am new to splunk, wondering if you could help me please, I am trying to analyse my vhosts access log.
the format is:
somedomain.com:80 123.123.123.123 - - [13/Sep/2013:02:15:21 +0000] "POST /wp-login.php HTTP/1.1" 200 1904 "some url here" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0"
I was able to graph by the vhost (somedomain.com) value, and by the bytes separately
but I would like to see bytes per vhost, could you please advise how could I do this?
Thank you very much, sofar splunk looks very robust and exciting...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Moonpixel,
Welcome to Splunk! If I had to guess, something like this might work:
<base search> | stats sum(bytes) AS total_bytes by vhost
Let me know how you go 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Moonpixel,
Welcome to Splunk! If I had to guess, something like this might work:
<base search> | stats sum(bytes) AS total_bytes by vhost
Let me know how you go 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
fantastic, thank you, this is exactly what I was looking for...
source="/.../other_vhosts_access.log" | stats sum(sc_bytes) AS total_bytes by s_sitename
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Moonpixel - Can you share the search queries you used to generate your successful results? Knowing that will help get you an answer 🙂
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Announcing Modern Navigation: A New Era of Splunk User Experience
Modernize your Splunk Apps – Introducing Python 3.13 in Splunk
Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...
